The Northwestern Mutual Life Insurance Company
bd_9247d9734b1c370e · schema v1 · pii pii-v1
Full breach record for The Northwestern Mutual Life Insurance Company →Newport Group, Inc. notified participants of a ransomware event affecting its third-party vendor, Infosys McCamish Systems (IMS), on November 2, 2023. The breach date is listed as October 29, 2023. IMS processes transactions for non-qualified deferred compensation plans. While IMS stated there is no evidence that participant information (name, address, date of birth, SSN) was impacted, Newport offered one year of complimentary identity protection through Experian as a precaution. Unit 42 and EY were engaged for security validation and e-discovery. The IMS environment was restored and hardened.
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_2f40c7ba9b1e8a51Indiana State AGfiled 2024-02-16Verified
- bd_569adbdb9e453b18Maine State AGfiled 2024-02-16Verified
- bd_fa687827ad46b0a5Montana State AGfiled 2024-02-16Verified
- bd_0dd7d6044a8af60dCalifornia State AGfiled 2024-02-29(13d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 21d gap
- bd_3c2a297f228ab470Montana State AGfiled 2024-02-29(13d gap)Verified
- bd_604c26d3099e3fe9Maine State AGfiled 2024-02-29(13d gap)Verified
- bd_decee521c248d27dWashington State AGfiled 2024-02-29(13d gap)Verified
- bd_f32704b1d1b017c1Oregon State AGfiled 2024-02-29(13d gap)Verified
- bd_7f405322cd8b7cd6Indiana State AGfiled 2024-03-01(14d gap)Verified
- bd_c86992b6fc6b6a8cNew Hampshire State AGfiled 2024-03-08(21d gap)Verified
Showing first 10 of 13 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-581102
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 16, 2024
- Raw hash
- fb553a8066bda671d0482b032166af5a4c1d3f94907e88c01ecb514144530c2e
Reporting entity
- Name
- The Northwestern Mutual Life Insurance Companynorm: the northwestern mutual life insurance
- Domain
- northwesternmutual.com
Victim entity
- Name
- The Northwestern Mutual Life Insurance Companynorm: the northwestern mutual life insurance
- Domain
- northwesternmutual.com
Incident
- Discovered
- Nov 2, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Third party
- via Infosys McCamish Systems
- Initial access
- supply_chain
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.