HackingFinancial ServicesFinanceCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

RJL Insurance Services

bd_e032d4b50aebcde7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 21, 2012

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for RJL Insurance Services →

RJL Insurance Services disclosed a vulnerability in its computer network that resulted in unauthorized electronic access to a server. The incident occurred over a two-week period in late September and early October 2011. Exposed data may include names, Social Security numbers, driver's license numbers, and medical conditions of employees and clients. Forensic experts confirmed the server was compromised. The company secured the information and offered 12 months of identity monitoring services through ID Experts.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 18, 2011

Begins

Feb 21, 2012

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: RJL Insurance Services
norm: rjl insurance
Domain: rjlservices.com

Name: RJL Insurance Services
norm: rjl insurance
Domain: rjlservices.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Sep 18, 2011 – Oct 1, 2011
Materiality determined: —
Notification sent: Jun 22, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Retained computer forensic experts to assist in investigating the event
Secured the information and confirmed it is no longer in danger of exposure
Changes made: Contracted with ID Experts to provide 12 months of FraudStop Basic Edition
Provided $20,000 insurance reimbursement policy
Provided access to fraud resolution representatives
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-22449
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 21, 2012
Raw hash: 4669f42c9204f1510eac21dfd8f7cfd4a565f14b2ede592c247e404b2393a1de

Reporting entityRJL Insurance Services

Victim entityRJL Insurance Services

IncidentUnauthorized Access

Stated responseRetained computer forensic experts to assist in investigating the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov