MalwareFinancial ServicesFinanceRansomwareCapture Stored DataRansom DemandedData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedMulti-Stage ChainPIILowContained

The Union Labor Life Insurance Company

bd_9f5920fe7ec04eaa · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 25, 2024

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

79%

Full breach record for The Union Labor Life Insurance Company →14 incidents on file

The Union Labor Life Insurance Company notified affected individuals that its third-party administrator, InfoSys/McCamish Systems LLC (IMS), suffered a ransomware attack between October 29 and November 2, 2023. IMS processed personal information on behalf of the Company for individual supplemental insurance products. The Company received notice of the incident on June 13, 2024. Affected individuals may have been policyholders, claimants, or beneficiaries. Complimentary Equifax credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 29, 2023

Begins

Jun 25, 2024

Filed

This filing is one of 2 filings about the same incident.View merged incident

Part of INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e7277fc0b21770002024-06-25Verified

Name: The Union Labor Life Insurance Company
norm: the union labor life insurance
Domain: ullico.com

Name: The Union Labor Life Insurance Company
norm: the union labor life insurance
Domain: ullico.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Oct 29, 2023 – Nov 2, 2023
Materiality determined: —
Notification sent: Jun 13, 2024
Affected individuals: Not disclosed
Data types: PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via InfoSys/McCamish Systems LLC

During the incident: Launched a thorough investigation into the circumstances surrounding the incident
Retained a third-party eDiscovery firm to conduct a detailed review of the impacted data
Offering complimentary Equifax Credit WatchTM Gold credit monitoring membership to affected individuals
Changes made: Will take the appropriate steps to prevent similar occurrences in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 25 · first

California State AGJun 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-587443
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 25, 2024
Raw hash: 62f29a2961acad22c9ddda3ef761e2d731d2025c51174ae02a9c723eb43df728

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Union Labor Life Insurance Company

Victim entityThe Union Labor Life Insurance Company

IncidentRansomware

Stated responseLaunched a thorough investigation into the circumstances surrounding the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov