Horizon Actuarial
bd_eee334be4ae16c8e · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →Horizon Actuarial Services, LLC experienced unauthorized access to two computer servers on November 10-11, 2021. The company discovered the incident on November 12, 2021, after receiving an email from a group claiming to have stolen personal data. The group demanded payment, which Horizon Actuarial paid in exchange for an agreement to delete the data. The investigation confirmed that personal information, including names, addresses, and potentially Social Security numbers, was accessed. The company notified the FBI, secured its servers, and began notifying affected individuals and benefit plans in January 2022. Identity monitoring services were offered to affected parties.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_53d47d81dff4b4e3California State AGfiled 2022-04-15(4d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-552482
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2022
- Raw hash
- b4756687ed28f1f2745ecd193f603f151d0372e94673fc682d2e639d82a844e0
Reporting entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Incident
- Discovered
- Nov 12, 2021
- Materiality determined
- —
- Notification sent
- Jan 13, 2022
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided notice to the FBI
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- CA 60-day late · 62d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 12, 2021→ Notified: Jan 13, 202262d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.