UnknownFinancial ServicesHealthcareFinanceCustomer Data InvolvedPIIIdentity (basic)Financial accountMedium

CMFG LIFE INSURANCE COMPANY

bd_d46e6042f83eb35d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 14, 2023

To disclose

—

Affected

5,236state residents only

Confidence

68%

Full breach record for CMFG LIFE INSURANCE COMPANY →3 incidents on file

CMFG Life Insurance Company filed a breach notification with Hawaii (and other states) regarding unauthorized access affecting customer PII, including financial account numbers. The company is offering credit monitoring, fraud consultation, and identity theft restoration services through Kroll.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Aug 14, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,236 affectedView incident

Name: CMFG LIFE INSURANCE COMPANY
norm: cmfg life insurance

Name: CMFG LIFE INSURANCE COMPANY
norm: cmfg life insurance
Industry: Financial ServicesllmHealthcarellm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 5,236state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unknown
Regulator citations: Filed notification with Hawaii Department of Commerce and Consumer Affairs

During the incident: Enroll in Kroll’s Monitoring Services
Offering Credit Monitoring
Offering Fraud Consultation
Offering Identity Theft Restoration
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HI CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://cca.hawaii.gov/wp-content/uploads/2026/05/Letter.2023-1008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: ed8397d0f11a4ff83cae00d4bc0376cbd9455385be30b532c1a2310968a88ceb

Reporting entityCMFG LIFE INSURANCE COMPANY

Victim entityCMFG LIFE INSURANCE COMPANY

IncidentUnknown

Stated responseEnroll in Kroll’s Monitoring Services

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenancecca.hawaii.gov