MalwareRansomwareRansom DemandedRansom PaidData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Horizon Actuarial
bd_d7ae542b7987d6bd · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →Horizon Actuarial Services, LLC experienced a ransomware incident on November 10-11, 2021, where unauthorized actors accessed servers and exfiltrated personal data. The attacker demanded ransom, which was paid in exchange for a deletion agreement. The Fund (UNITE HERE Retirement Fund) was notified, and affected individuals received 12 months of Kroll identity monitoring. Data types included names, SSNs, and DOBs.
California clockDiscovered Nov 12, 2021 → Notified Jan 28, 202277d ✗ CA 60-day late22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b63558cff10094f9New Hampshire State AGfiled 2022-04-18Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-552671
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2022
- Raw hash
- ae0cb51dfa838b55ecd8942fb3272613eaf37decc727b299afbc5a0948330896
Reporting entity
- Name
- UNITE HERE Retirement Fundnorm: unite here retirement
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
- Industry
- professional_services
Incident
- Discovered
- Nov 12, 2021
- Materiality determined
- —
- Notification sent
- Jan 28, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided notice to the FBI
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- CA 60-day late · 77d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 12, 2021→ Notified: Jan 28, 202277d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.