Social EngineeringPhishingTargetedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Colorado Bankers Life Insurance Company
bd_d289c3d80b9d481f · schema v1 · pii pii-v1
Full breach record for Colorado Bankers Life Insurance Company →Colorado Bankers Life Insurance Company reported a targeted phishing incident affecting employee cloud-based email accounts between March 28 and April 13, 2018. The attack compromised employee credentials, leading to the exposure of policyholder and producer personal information (names, addresses, SSNs). CBLLife secured accounts, engaged forensic investigators, and provided one year of complimentary credit monitoring to affected individuals. The internal network was not affected.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_53dd610374a4b945Montana State AGfiled 2018-08-03Candidate
- bd_c11f550792ce560bOregon State AGfiled 2018-08-03Verified
- bd_fdd0d8253bd2d88fWashington State AGfiled 2018-08-03Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-138565
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2018
- Raw hash
- a0def572a4e638ac343313375b04628b6a2dcfc819527a5974ba4a4da17dc45f
Reporting entity
- Name
- Colorado Bankers Life Insurance Companynorm: colorado bankers life insurance
Victim entity
- Name
- Colorado Bankers Life Insurance Companynorm: colorado bankers life insurance
Incident
- Discovered
- Jun 20, 2018
- Materiality determined
- Apr 13, 2018
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.