HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Fidelity Life Association

bd_bf9f3b9ad11992c2 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Mar 25, 2025

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Fidelity Life Association →3 incidents on file

Fidelity Life Association notified Nebraska residents of a data breach involving unauthorized access to an online storage location for application documents. The incident occurred between January 16 and February 12, 2025. Affected data included names, addresses, dates of birth, medical information, and driver's license numbers. No evidence was found that data was accessed. Fidelity engaged third-party experts and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 16, 2025

Begins

Mar 25, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Fidelity Life Association
norm: fidelity life

Name: Fidelity Life Association
norm: fidelity life
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jan 16, 2025 – Feb 12, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Working with third-party experts to investigate the incident
Implemented measures designed to protect against similar activity in the future
Offering a complimentary one-year membership to Experian IdentityWorks
Changes made: Implemented measures designed to protect against similar activity in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/d8870943-38b2-4f6c-9382-5be015beea1d.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 25, 2025
Raw hash: 03486355b12b8644e00c55a201d2295d4738a565603f15e7662b115fc2bcde18

Reporting entityFidelity Life Association

Victim entityFidelity Life Association

IncidentUnauthorized Access

Stated responseWorking with third-party experts to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov