HackingFinancial ServicesFinanceAbuse Of FunctionalityCapture App DataCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTMediumContained
Midvale Indemnity Co. Small Business Insurance
bd_ae879f20acc43f16 · schema v1 · pii pii-v1
Full breach record for Midvale Indemnity Co. Small Business Insurance →Midvale Indemnity Company notified consumers of an unauthorized bot attack on its online auto insurance quoting platform between January 19–29, 2021. Unauthorized parties used automated bot processes and personal information from unknown sources to extract driver's license numbers from the platform. Affected individuals were offered 12 months of free credit monitoring through Cyberscout/Experian.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-540820
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 13, 2021
- Raw hash
- 4cdbf5b544f0bbf07d9af1a765c902f573681ebedff69a27a5b299450b0f015f
Reporting entity
- Name
- Midvale Indemnity Co. Small Business Insurancenorm: midvale indemnity co small business insurance
- Domain
- connect.midvalebusinessinsurance.com
Victim entity
- Name
- Midvale Indemnity Co. Small Business Insurancenorm: midvale indemnity co small business insurance
- Domain
- connect.midvalebusinessinsurance.com
- Industry
- Insurance
- Industry
- Financial Servicesllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- May 13, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated CollectionT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.