AccidentalFinancial ServicesFinanceMisdeliveryEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDEmploymentMediumResolved

Transamerica

bd_9928df51467f914d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 22, 2018

Filed

Nov 2, 2018

To disclose

10 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Transamerica →9 incidents on file

On August 22, 2018, a Transamerica employee inadvertently sent an email containing personal information (name, SSN, retirement plan details, hire date, contribution percentages) to unrelated clients. The incident was contained, recipients confirmed deletion, and no misuse was identified. Transamerica offered one year of complimentary identity monitoring via Kroll and provided additional employee training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 72 days

Aug 22, 2018

Begins

Aug 22, 2018

Discovered

Nov 2, 2018

Filed

vs. sector median

+2 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Transamerica
norm: transamerica

Name: Transamerica
norm: transamerica
Industry: Financial Servicesllm

Discovered: Aug 22, 2018
Breach occurred: Aug 22, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unknown
Threat actor: Internal

During the incident: Began an investigation as soon as we learned of the incident
Provided additional coaching and training to the employee involved
Offered credit monitoring services at no cost for one year
Secured the services of Kroll to provide identity monitoring
Changes made: Exploring the use of additional system controls to prevent similar incidents in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(72 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-141396
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 2, 2018
Raw hash: 643479587a1bd5652afeeda5360da2756bb24635e875b4f0904de35056e25ecd

Reporting entityTransamerica

Victim entityTransamerica

Incidentdiscovered Aug 22, 2018

Stated responseBegan an investigation as soon as we learned of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov