HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

GENWORTH FINANCIAL, INC.

bd_d59617113b06dba4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 20, 2020

Filed

Jul 17, 2020

To disclose

13 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for GENWORTH FINANCIAL, INC. →13 incidents on file

Genworth identified unauthorized access to online producer accounts on April 20, 2020, due to compromised login credentials stolen from another site. The breach, occurring on April 1, 2020, exposed names, addresses, dates of birth, phone numbers, agent codes, SSNs, and signatures. Affected accounts were disabled, and federal authorities were notified. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 20, 2020 → Notified May 14, 202024d ✓ CA 60-day OK13 weeks discovery → filing

Incident timeline

undetected · 19 days

discovery → filing · 13 weeks / 88 days

Apr 1, 2020

Begins

Apr 20, 2020

Discovered

Jul 17, 2020

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: GENWORTH FINANCIAL, INC.
norm: genworth financial
Domain: genworth.com

Name: GENWORTH FINANCIAL, INC.
norm: genworth financial
Domain: genworth.com
Industry: Financial Servicesllm

Discovered: Apr 20, 2020
Breach occurred: Apr 1, 2020
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 14, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Been in contact with federal authorities to address this incident
Initial access: valid_credentials

During the incident: Disabled the affected producer accounts to prevent further access to documents and information
Continue to monitor the accounts for any suspicious behaviors
Been in contact with federal authorities to address this incident
Offering a one-year subscription of credit monitoring and resolution services with ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(88 days from discovery to filing)
Compliance flags: CA 60-day OK · 24d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 20, 2020
→ Notified: May 14, 2020
24d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 20, 2020 → Notified: May 14, 2020	24d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-192115
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2020
Raw hash: 018ed89b4b61f5a573e58b61733085c9c58bde171b6f5f7e40b1a48bf9ccb7dd

Reporting entityGENWORTH FINANCIAL, INC.

Victim entityGENWORTH FINANCIAL, INC.

Incidentdiscovered Apr 20, 2020

Stated responseDisabled the affected producer accounts to prevent further access to documents and information

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov