MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedTargetedCredentialsGovernment IDPIIMediumContained

The Hartford Financial Services Group

bd_ed803162f9c9e955 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2019

Filed

Mar 18, 2019

To disclose

7 weeks

Affected

1state residents only

Confidence

66%

Full breach record for The Hartford Financial Services Group →12 incidents on file

The Hartford notified South Carolina residents that an employee stole user credentials (usernames and passwords) of current and former employees. The incident was discovered on January 31, 2019, via an automated alert regarding unauthorized email transmission. The insider accessed confidential HR compensation data and potentially personal credentials and SSNs. The employee was terminated, forensic exams were conducted, and a cybersecurity firm was engaged. Affected individuals were offered two years of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 46 days

Jan 31, 2019

Discovered

Mar 18, 2019

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: The Hartford Financial Services Group
norm: the hartford financial

Name: The Hartford Financial Services Group
norm: the hartford financial
Industry: Financial Servicesllm

Discovered: Jan 31, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: CredentialsGovernment IDPII
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: Internal
Initial access: insider_action

During the incident: Terminated the individual’s employment
Conducted a review of our systems, including archived records
Interviewed the individual who gained unauthorized access
Forensically examined his Hartford work devices and company email records
Engaged a leading cyber security consulting firm to help us determine if any other information may have been accessed
Offering, at no cost to you, a complimentary two-year membership of Experian’s® IdentityWorks
Changes made: Examining how the individual was able to gain access to the user credentials
Evaluating how we may further enhance our protections to guard against similar incidents going forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2019/TheHartford.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 18, 2019
Raw hash: ec5492002b13fa9a81f32a688a74c3965f0435e84b0b3fc25daf93a427d9bc21

Reporting entityThe Hartford Financial Services Group

Victim entityThe Hartford Financial Services Group

Incidentdiscovered Jan 31, 2019

Stated responseTerminated the individual’s employment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov