LUMICO LIFE INSURANCE COMPANY
bd_f409b232fcffae5c · schema v1 · pii pii-v1
Full breach record for LUMICO LIFE INSURANCE COMPANY →2 incidents on fileLumico Life Insurance Company notified policyholders in multiple states (including Delaware, NY, MD, DC, NC, RI, NM) of a MOVEit Transfer vulnerability exploited by cyber criminals. The breach occurred May 29-30, 2023, via third-party provider NTT Data Services and its vendor PBI. Impacted data included names, SSNs, DOBs, addresses, and policy numbers. Lumico engaged Kroll for two years of identity monitoring and notified law enforcement and state regulators. The incident is contained.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
Jun 19, 2023
Discovered
Jul 16, 2023
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Delaware State AGbd_d6bf8fde23a83ea12023-07-26 · +10dVerified
- Washington State AGbd_edf05202d53296222023-07-27 · +11dVerified
- Indiana State AGbd_9d4ecdb86f3319ff2023-07-28 · +12dVerified
- South Carolina State AGbd_2c84a71aabc7f8e42023-08-01 · +16dVerified
Show 4 more filings ↓Show fewer ↑up to 29d gap
- California State AGbd_60ed3513a32e4a462023-08-01 · +16dVerified
- Massachusetts State AGbd_8db61e50e539b92a2023-08-01 · +16dVerified
- Hawaii State AGbd_157503e1142976682023-08-08 · +23dVerified
- Oregon State AGbd_a4bb1ffa233d029e2023-08-14 · +29dVerified
Filing propagation · 9 filings · 8 states
View merged incident ↗Pattern: first filing Jul 16 (DE), last Aug 14 (OR) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.