HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
METROPOLITAN LIFE INSURANCE CO
bd_b8dbb0cdd9b101a7 · schema v1 · pii pii-v1
Full breach record for METROPOLITAN LIFE INSURANCE CO →Metropolitan Life Insurance Company notified Delaware residents of a data breach involving a third-party service provider. The provider's network was intruded upon starting February 22, 2024, potentially exposing names, DOBs, policy numbers, and SSNs of MetLife retirement plan customers. MetLife offered one year of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7bbd29fab54c4507Indiana State AGfiled 2024-08-27Verified
- bd_faf3aa9b40c53bb7Montana State AGfiled 2024-08-28(1d gap)Verified
- bd_60c1157313c165feMaine State AGfiled 2024-08-26(1d gap)Candidate
- bd_9fb330886330758fTexas State AGfiled 2024-08-29(2d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/09/Generic-Individual-Notification-Letter_1yrCM_1714-FNL.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 27, 2024
- Raw hash
- d96c6c3b4f1805aedf6d81b660114927d3e349b7d083de71bbc8d8aa7096ec5e
Reporting entity
- Name
- METROPOLITAN LIFE INSURANCE COnorm: metropolitan life insurance
- Domain
- metlife.com
Victim entity
- Name
- METROPOLITAN LIFE INSURANCE COnorm: metropolitan life insurance
- Domain
- metlife.com
Incident
- Discovered
- Feb 22, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- supply_chain
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.