UNITED OF OMAHA LIFE INSURANCE COMPANY
bd_d1833f07d538c59d · schema v1 · pii pii-v1
Full breach record for UNITED OF OMAHA LIFE INSURANCE COMPANY →United of Omaha Life Insurance Company detected a phishing campaign targeting employees on April 23, 2024. An unauthorized party accessed one employee's email account between April 21 and April 23, 2024. The attacker may have viewed emails containing personal information including names, addresses, dates of birth, driver's license numbers, health insurance policy numbers, social security numbers, employment information, and limited health information. No data was confirmed to be exfiltrated via email. The company changed passwords, hired forensic experts, and offered 12 months of identity protection.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_27ab52e41d0da6d1Indiana State AGfiled 2024-07-26Verified
- bd_d12bf3dd13d902afWashington State AGfiled 2024-07-26Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-589387
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 26, 2024
- Raw hash
- 751a8aeb297d7de8b0e81915e06be1439ca9f5dfb96d183146fa19278be2d1f7
Reporting entity
- Name
- UNITED OF OMAHA LIFE INSURANCE COMPANYnorm: united of omaha life insurance
Victim entity
- Name
- UNITED OF OMAHA LIFE INSURANCE COMPANYnorm: united of omaha life insurance
Incident
- Discovered
- Apr 23, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEMPLOYMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.