HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
NEW YORK LIFE INSURANCE COMPANY
bd_bd81384556d7cb8e · schema v1 · pii pii-v1
Full breach record for NEW YORK LIFE INSURANCE COMPANY →New York Life Insurance Company reported an external system breach (hacking) occurring May 29-30, 2023, discovered on May 31, 2023. The incident compromised names and Social Security Numbers of 35,062 individuals, including 21 Maine residents. Notification was sent on August 21, 2023, offering Kroll credit monitoring and identity restoration services.
Maine clockDiscovered May 31, 2023 → Filed with AG Aug 24, 202385d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 10 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- bd_3e32b53431a6efdaWashington State AGfiled 2023-08-24Verified
- bd_fae5706e9cae755dOregon State AGfiled 2023-08-24Verified
- bd_0e1c9b9c854304bbMaine State AGfiled 2023-08-11(13d gap)Verified
- bd_8c7a428205597b36California State AGfiled 2023-08-11(13d gap)Verified
Show 5 more filings ↓Show fewer ↑up to 60d gap
- bd_2275313f347a3b82Maine State AGfiled 2023-08-10(14d gap)Verified
- bd_aea6f9438346020fCalifornia State AGfiled 2023-08-10(14d gap)Candidate
- bd_166d785649d0cf77Washington State AGfiled 2023-10-23(60d gap)Candidate
- bd_8beaf5d613d1c2a9Oregon State AGfiled 2023-10-23(60d gap)Candidate
- bd_cff49122540e8170Maine State AGfiled 2023-10-23(60d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/237935a0-47b8-42f0-8948-87ab979da8e6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 24, 2023
- Raw hash
- 75973d600c2928fa08d7003dfdbc567102b99b9285647b3d379e2f447b7b60ce
Reporting entity
- Name
- NEW YORK LIFE INSURANCE COMPANYnorm: new york life insurance
- Domain
- newyorklife.com
Victim entity
- Name
- NEW YORK LIFE INSURANCE COMPANYnorm: new york life insurance
- Domain
- newyorklife.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Aug 21, 2023
- Affected individuals
- 35,062
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(85 days from discovery to filing)
- Compliance flags
- ME AG >30d · 85dME resident >60d · 82d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 31, 2023→ Filed with AG: Aug 24, 202385d 30 days (soft) ME AG >30d Maine Discovered: May 31, 2023→ Notified: Aug 21, 202382d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.