Ethos Technologies Inc
bd_bd4f1101ee601188 · schema v1 · pii pii-v1
Full breach record for Ethos Technologies Inc →2 incidents on fileEthos Technologies Inc. disclosed a cyberattack where unauthorized actors exploited its online life insurance application process to access Social Security numbers. The incident occurred between August 4, 2022, and December 9, 2022, but was not discovered until December 8, 2022. Actors used known personal information to trigger a third-party service that returned SSNs in page source code, which were then extracted. Ethos notified the FBI, engaged forensic investigators, and implemented technical code changes. Affected individuals were offered two years of credit monitoring and identity theft protection.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 4, 2022
Begins
Dec 8, 2022
Discovered
Oct 4, 2023
Filed
vs. sector median
+34 wks slower
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Montana State AGbd_0dabcee7b806dee92022-12-21 · +287dVerified
- Massachusetts State AGbd_138847a223ea759e2022-12-21 · +287dCandidate
- Indiana State AGbd_3023deeb85c68b172022-12-21 · +287dVerified
- California State AGbd_46e2aa29e4614efd2022-12-21 · +287dVerified
Show 3 more filings ↓Show fewer ↑up to 288d gap
- Oregon State AGbd_78f2062de73935142022-12-21 · +287dVerified
- Maine State AGbd_b384766745fe731b2022-12-21 · +287dVerified
- Washington State AGbd_01d1752e984f24d92022-12-20 · +288dVerified
Filing propagation · 8 filings · 7 states
View merged incident ↗Pattern: first filing Dec 20 (WA), last Oct 4 (CA) — a 288-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.