HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Elephant Insurance Services, LLC
bd_9c3c27eeb6366a86 · schema v1 · pii pii-v1
Full breach record for Elephant Insurance Services, LLC →Elephant Insurance Services, LLC reported a cybersecurity incident occurring between March 26, 2022, and April 1, 2022. The company identified unusual network activity and determined that consumer information, including names and government identifiers, may have been viewed or copied. The company reported the incident to federal law enforcement, notified state regulators, and offered 12 months of credit monitoring services to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_02eea774d2f73349Washington State AGfiled 2022-05-25Candidate
- bd_5705d2f819bcc2f8Delaware State AGfiled 2022-05-25Verified
- bd_7d05c4c5c31b6d4eMaine State AGfiled 2022-05-25Verified
- bd_9be6865e69c3fc04Montana State AGfiled 2022-05-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-553749
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2022
- Raw hash
- 3f3142b2d350de17f872d3945b7fa2dd113f1ffd3e312ef014d713022a95683c
Reporting entity
- Name
- Elephant Insurance Services, LLCnorm: elephant insurance
- Domain
- elephant.com
Victim entity
- Name
- Elephant Insurance Services, LLCnorm: elephant insurance
- Domain
- elephant.com
Incident
- Discovered
- Apr 1, 2022
- Materiality determined
- Apr 25, 2022
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(54 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.