AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDPHIMediumResolved

State Farm VP Management Corp.

bd_c4370537a08a514e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 15, 2015

To disclose

—

Affected

2state residents only

Confidence

66%

State Farm VP Management Corp. notified Montana residents of a data security incident on October 26, 2015, where an agent's office sent an email with an incorrect attachment containing personal information including SSN, driver's license, DOB, and health insurance info. No misuse was believed to have occurred. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 26, 2015

Begins

Dec 15, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: State Farm VP Management Corp.
norm: state farm vp management
Domain: statefarm.com

Name: State Farm VP Management Corp.
norm: state farm vp management
Domain: statefarm.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Oct 26, 2015
Materiality determined: —
Notification sent: Dec 16, 2015
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDPHI
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1566.002 Spearphishing Link

During the incident: Offering 12-month subscription to credit monitoring and identity theft protection service
Contacted the customer who received the email
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/State-Farm-2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 15, 2015
Raw hash: d97f8687516539abb7fb4059aed05ed3a4356c2f5650314f32a37b69f8da9062

Reporting entityState Farm VP Management Corp.

Victim entityState Farm VP Management Corp.

IncidentMisconfiguration

Stated responseOffering 12-month subscription to credit monitoring and identity theft protection service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov