HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedCredentialsIdentity (basic)LowContained

USI Insurance

bd_975139ae8c3390e1 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 13, 2013

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for USI Insurance →

USI Insurance Services LLC notified the California Attorney General of a security incident where malicious software was installed on their system around October 2, 2013. The malware allowed an unauthorized party to view files containing usernames and passwords. The company disabled the compromised credentials and engaged a third-party forensic team. Affected individuals' names, mailing addresses, and client definitions were stored on the system. The company offered 12 months of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 2, 2013

Begins

Nov 13, 2013

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_ddcd0f94b97706692013-11-15 · +2dVerified

Name: USI Insurance Services LLC
norm: usi insurance services
Domain: usicg.com

Name: USI Insurance
norm: usi insurance
Domain: jobs.usi.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Oct 2, 2013
Materiality determined: —
Notification sent: Nov 14, 2013
Affected individuals: Not disclosed
Data types: CredentialsIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid AccountsT1056 Input Capture
Threat actor: External

During the incident: Disabled the compromised username and password
Launched an internal investigation
Hired a third party computer forensics team to assist in determining the extent to which our system may have been compromised
Purchased twelve months of AllClear PRO and AllClear SECURE identity protection services from AllClear ID, at no cost to you
Changes made: Taking steps to prevent future incidents of this nature and improve and strengthen the security of our system
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGNov 13 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-43247
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2013
Raw hash: 959162899c580f2fba0ea835314ec455027c19d7900ae1ce6dcdc10d3c634722

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityUSI Insurance Services LLC

Victim entityUSI Insurance

IncidentUnknown

Stated responseDisabled the compromised username and password

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov