DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)EmploymentMediumContained

UNITED OF OMAHA LIFE INSURANCE COMPANY

bd_d1833f07d538c59d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 23, 2024

Filed

Jul 26, 2024

To disclose

13 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%
Full breach record for UNITED OF OMAHA LIFE INSURANCE COMPANY

United of Omaha Life Insurance Company detected a phishing campaign targeting employees on April 23, 2024. An unauthorized party accessed one employee's email account between April 21 and April 23, 2024. The attacker may have viewed emails containing personal information including names, addresses, dates of birth, driver's license numbers, health insurance policy numbers, social security numbers, employment information, and limited health information. No data was confirmed to be exfiltrated via email. The company changed passwords, hired forensic experts, and offered 12 months of identity protection.

Incident timeline

undetected · 2 days
discovery → filing · 13 weeks / 94 days

Apr 21, 2024

Begins

Apr 23, 2024

Discovered

Jul 26, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 25d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Illinois State AGJul 1 · first
California State AG+25d · this page

Pattern: first filing Jul 1 (IL), last Jul 26 (CA) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.