DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingTargetedCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDMediumResolved

Colorado Bankers Life Insurance Company

bd_d289c3d80b9d481f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Filed

Aug 3, 2018

To disclose

Affected

Not disclosed

Linked

6 filings

Confidence

66%
Full breach record for Colorado Bankers Life Insurance Company

Colorado Bankers Life Insurance Company experienced a targeted phishing attack compromising employee cloud-based email accounts between March 28 and April 13, 2018. The investigation, completed on June 20, 2018, confirmed internal networks were not affected. Affected individuals include employees, producers, advisors, and policyholders. The company secured accounts, engaged forensic investigators, and offered one year of complimentary credit monitoring via myTrueIdentity. Remediation included employee training and implementation of multi-factor authentication.

Incident timeline

Mar 28, 2018

Begins

Aug 3, 2018

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGAug 3 · first
Oregon State AGAug 3 · first
Washington State AGAug 3 · first
California State AGAug 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.