HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

The Northwestern Mutual Life Insurance Company

bd_c86992b6fc6b6a8c · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2023

Filed

Mar 8, 2024

To disclose

18 weeks

Affected

344state residents only

Linked

16 filings

Confidence

66%

Full breach record for The Northwestern Mutual Life Insurance Company →22 incidents on file

Northwestern Mutual Life Insurance Company reported a cybersecurity incident involving its third-party vendor, Infosys McCamish Systems (IMS). IMS systems were impacted by unauthorized access on or around November 2, 2023. IMS retained forensic and e-discovery firms, disabled systems, and restored services with additional controls. 344 New Hampshire residents' names and addresses may have been impacted. IMS is offering 24 months of free credit monitoring via Kroll. Investigation into whether personal data was exfiltrated is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 127 days

Nov 2, 2023

Begins

Nov 2, 2023

Discovered

Mar 8, 2024

Filed

vs. sector median

+8 wks slower

This filing is one of 16 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_7f405322cd8b7cd62024-03-01 · +7dVerified
Montana State AGbd_3c2a297f228ab4702024-02-29 · +8dVerified
Maine State AGbd_604c26d3099e3fe92024-02-29 · +8dVerified
Massachusetts State AGbd_bfc4408712b72fa62024-02-29 · +8dVerified

Show 6 more filings ↓up to 30d gap

Oregon State AGbd_f32704b1d1b017c12024-02-29 · +8dVerified
Indiana State AGbd_2f40c7ba9b1e8a512024-02-16 · +21dVerified
Massachusetts State AGbd_33933653706e0f642024-02-16 · +21dVerified
Maine State AGbd_569adbdb9e453b182024-02-16 · +21dVerified
Montana State AGbd_fa687827ad46b0a52024-02-16 · +21dVerified
Montana State AGbd_34f99a0a1b7ccc3f2024-02-07 · +30dCandidate

Showing first 10 of 15 linked disclosures.

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com
Industry: Financial Servicesllm

Discovered: Nov 2, 2023
Breach occurred: Nov 2, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 1, 2024
Affected individuals: 344state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Retained a third-party forensics firm to investigate and assist with IMS’s recovery plan
Retained a third-party e-discovery firm to investigate potential impact to consumer data
Disabled their systems
Restored services to their systems with additional security controls
Offered 24 months of free identity theft and credit monitoring services through Kroll
Changes made: Restored services to their systems with additional security controls
Found no evidence of continued threat actor access in IMS’s environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGFeb 7 · first

Indiana State AG+9d

Massachusetts State AG+9d

Maine State AG+9d

Montana State AG+9d

Montana State AG+22d

Maine State AG+22d

Massachusetts State AG+22d

Oregon State AG+22d

Indiana State AG+23d

New Hampshire State AG+30d · this page

Pattern: first filing Feb 7 (MT), last Mar 8 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/northwestern-mutual-life-insurance-co-20240308.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 8, 2024
Raw hash: 9a0dd9eb09dad2690edafc0f86cf8c8c4dfdfc38de985e8343366336e3c29b9e

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityThe Northwestern Mutual Life Insurance Company

Victim entityThe Northwestern Mutual Life Insurance Company

Incidentdiscovered Nov 2, 2023

Stated responseRetained a third-party forensics firm to investigate and assist with IMS’s recovery plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov