HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedGovernment IDMediumContained

Government Employees Insurance Company

bd_af2081ccb7c13d31 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 15, 2021

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Government Employees Insurance Company →

GEICO notified California residents that between January 21 and March 1, 2021, fraudsters used information acquired elsewhere to gain unauthorized access to driver's license numbers via GEICO's online sales system. The company secured the website, implemented additional security enhancements, and offered one year of identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 21, 2021

Begins

Apr 15, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_1312497476f416bc2021-04-13 · +2dCandidate
Massachusetts State AGbd_d253c2d93469db482021-04-13 · +2dVerified
Indiana State AGbd_c0ff0fcdf7dd99ea2021-04-09 · +6dVerified

Name: Government Employees Insurance Company
norm: government employees insurance

Name: Government Employees Insurance Company
norm: government employees insurance
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jan 21, 2021 – Mar 1, 2021
Materiality determined: —
Notification sent: Apr 9, 2021
Affected individuals: Not disclosed
Data types: Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Secured the affected website
Worked to identify the root cause of the incident
Implemented additional security enhancements to help prevent future fraud and illegal activities on our website
Offered a one-year subscription to IdentityForce to help protect your identity from theft
Changes made: Implemented additional security enhancements to help prevent future fraud and illegal activities on our website
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 9 · first

Maine State AG+4d

Massachusetts State AG+4d

California State AG+6d · this page

Pattern: first filing Apr 9 (IN), last Apr 15 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-539989
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2021
Raw hash: 9d914240e164b3162f88d2243299bd24d4544c1062226a652b7e8445193d9248

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGovernment Employees Insurance Company

Victim entityGovernment Employees Insurance Company

IncidentUnauthorized Access

Stated responseSecured the affected website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov