HackingFinancial ServicesFinanceData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIHighContained

5Star Life Insurance Company

bd_b8c10571c80699f9 · schema v1 · pii pii-v2

Severity

High

Discovered

—

Filed

Sep 24, 2026

To disclose

—

Affected

20,625

Linked

2 filings

Confidence

69%

Full breach record for 5Star Life Insurance Company →

5Star Life Insurance Company was affected by a cyber incident on the network of its third-party vendor, Paylogix, LLC. Between November 13 and 18, 2025, unauthorized parties viewed or copied files containing personal information of approximately 20,625 individuals, including names, dates of birth, Social Security numbers, financial account information, and medical/health insurance data. Paylogix contained the incident, engaged forensic investigators, and notified law enforcement. Affected individuals are being offered credit monitoring.

J jump to incidentP pin to compareR raw source

California clockConsumers notified Aug 14, 2026 → AG copy submitted Sep 24, 202641d ✗ CA AG copy >15d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Nov 13, 2025

Begins

Sep 24, 2026

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_093486e36b99018e2026-08-14 · +41dVerified

Name: 5Star Life Insurance Company
norm: 5star life insurance

Name: 5Star Life Insurance Company
norm: 5star life insurance
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Nov 13, 2025 – Nov 18, 2025
Materiality determined: —
Notification sent: Aug 14, 2026
Affected individuals: 20,625nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified state attorneys generalNotified certain insurance industry regulators
Third party: via Paylogix, LLC

During the incident: Implemented containment measures to stop unauthorized access
Engaged external legal counsel
Engaged forensic and cybersecurity firm for incident response
Conducted privileged forensic investigation
Reported event to law enforcement
Implemented additional technical security measures
Changes made: Implemented additional technical security measures
Offering complimentary credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: CA AG copy >15d · 41d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Consumers notified: Aug 14, 2026
→ AG copy submitted: Sep 24, 2026
41d 15 calendar days CA AG copy >15d

Statute	Window	Elapsed	Threshold	Status
California	Consumers notified: Aug 14, 2026 → AG copy submitted: Sep 24, 2026	41d	15 calendar days	CA AG copy >15d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGAug 14 · first

California State AG+41d · this page

Pattern: first filing Aug 14 (IN), last Sep 24 (CA) — a 41-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-630231
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 24, 2026
Raw hash: eedc6e5cfb29a827c6261de74c8d17ee1ea46bd83fef93cadb61b39fd293315d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entity5Star Life Insurance Company

Victim entity5Star Life Insurance Company

IncidentUnknown

Stated responseImplemented containment measures to stop unauthorized access

ComplianceCA AG copy >15d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov