MalwareFinancial ServicesFinanceRansomwareData ExfiltratedCustomer Data InvolvedMulti-Stage ChainIdentity (basic)Government IDPIIHighContained

Farmers New World Life Insurance Company

bd_ac1184ce51fd6755 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 2, 2023

Filed

Nov 22, 2024

To disclose

13 months

Affected

1,214state residents only

Linked

5 filings

Confidence

69%

Full breach record for Farmers New World Life Insurance Company →2 incidents on file

Farmers New World Life Insurance Company reported a ransomware incident affecting 1,214 Washington residents. Third-party vendor Infosys McCamish Systems (IMS) systems were encrypted between Oct 29 and Nov 2, 2023. IMS discovered the incident on Nov 2, 2023. Personal information from FNWL life insurance policies was accessed. Notifications sent Nov 15, 2024.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d13 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 4 days

discovery → filing · 13 months / 386 days

Oct 29, 2023

Begins

Nov 2, 2023

Discovered

Nov 22, 2024

Filed

vs. sector median

+47 wks slower

This filing is one of 5 about the same incident.View merged incident

Part of INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_6e9f78978d63955f2024-11-21 · +1dVerified
Maine State AGbd_53278c4fbb060db22024-11-19 · +3dCandidate
Massachusetts State AGbd_e30de8f9fb42b3172024-11-27 · +5dVerified
Indiana State AGbd_42b002769209a3982024-11-15 · +7dVerified

Name: Farmers New World Life Insurance Company
norm: farmers new world life insurance

Name: Farmers New World Life Insurance Company
norm: farmers new world life insurance
Industry: Financial Servicesllm

Discovered: Nov 2, 2023
Breach occurred: Oct 29, 2023 – Nov 2, 2023
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 15, 2024
Affected individuals: 1,214state-resident count only
Data types: PIIIdentity (basic)
Data elements: NameSocial Security numberDriver's licence numberDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Third party: via Infosys McCamish Systems, LLC

During the incident: Began an investigation with the assistance of third-party cybersecurity experts, retained through outside counsel
Notified law enforcement
Conducted a thorough and time-intensive review of the data at issue
Sent notifications to affected individuals
Notified the credit reporting agencies
Changes made: Contained and remediated the incident
Provided access to twenty-four (24) months of complimentary identity monitoring services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(386 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGNov 15 · first

Maine State AG+4d

California State AG+6d

Washington State AG+7d · this page

Massachusetts State AG+12d

Pattern: first filing Nov 15 (IN), last Nov 27 (MA) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA31499.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2024
Raw hash: 4f12ca1b974d843a327731bce07e55ca5847ab9d7adc2fd462a3e96edc2b7fe9

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFarmers New World Life Insurance Company

Victim entityFarmers New World Life Insurance Company

Incidentdiscovered Nov 2, 2023

Stated responseBegan an investigation with the assistance of third-party cybersecurity experts, retained through outside counsel

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com