HackingFinancial ServicesHealthcareFinanceCustomer Data InvolvedIdentity (basic)FinancialLowContained

North American Company for Life and Health Insurance

bd_dc9504a108411aef · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 12, 2025

Filed

Aug 16, 2025

To disclose

4 days

Affected

2state residents only

Confidence

66%

Full breach record for North American Company for Life and Health Insurance →

North American Company for Life and Health Insurance notified individuals of a security incident discovered on August 12, 2025, involving unauthorized access to a web portal used by agents. The attacker may have viewed personal information including names, addresses, policy numbers, and account values. The company terminated the attack and offered one year of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d4 days discovery → filing

Incident timeline

discovery → filing · 4 days

Aug 12, 2025

Discovered

Aug 16, 2025

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: North American Company for Life and Health Insurance
norm: north american company for life and health insurance

Name: North American Company for Life and Health Insurance
norm: north american company for life and health insurance
Industry: Financial ServicesllmHealthcarellm

Discovered: Aug 12, 2025
Materiality determined: —
Notification sent: Aug 12, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Financial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Terminated the attack
Prevented any further unauthorized access
Partnered with Equifax to provide identity theft protection product for one year at no cost
Changes made: Improved the security of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 days(4 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34364.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2025
Raw hash: ed12d153feeef8035354862ce810273d175a115334036124049e289b6886ac82

Reporting entityNorth American Company for Life and Health Insurance

Victim entityNorth American Company for Life and Health Insurance

Incidentdiscovered Aug 12, 2025

Stated responseTerminated the attack

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com