Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PIIMediumContained

NEW YORK LIFE INSURANCE COMPANY

bd_f49e39021ccd162a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 23, 2021

Filed

Aug 16, 2021

To disclose

16 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for NEW YORK LIFE INSURANCE COMPANY →26 incidents on file

New York Life notified Montana residents that an agent's account was compromised via phishing on April 23, 2021. The attacker accessed the agent's mailbox, potentially exposing customer PII including SSNs, DOBs, and financial data. New York Life engaged forensic experts, reset credentials, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 115 days

Apr 23, 2021

Begins

Apr 23, 2021

Discovered

Aug 16, 2021

Filed

vs. sector median

+7 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_5dcea4906e256d882021-08-16Verified
Montana State AGbd_3e3182a8cbce08512021-09-28 · +43dVerified by operator
Massachusetts State AGbd_571814d25c87f25a2021-09-28 · +43dCandidate
Maine State AGbd_db7a24831b670e942021-09-28 · +43dVerified by operator

Show 1 more filing ↓up to 53d gap

New Hampshire State AGbd_2da96434b34095c32021-10-08 · +53dVerified

Name: NEW YORK LIFE INSURANCE COMPANY
norm: new york life insurance
Domain: newyorklife.com
Industry: Insurance

Name: NEW YORK LIFE INSURANCE COMPANY
norm: new york life insurance
Domain: newyorklife.com
Industry: Insurance
Industry: Financial Servicesllm

Discovered: Apr 23, 2021
Breach occurred: Apr 23, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Promptly had him change his credentials
Hired a third-party forensic expert to assist in our investigation
Reviewed the large volume of emails in the agent’s mailbox
Flagged your policy number in our system so that additional verification steps will be used if anyone tries to access your account
Provide one-year of Equifax Credit Watch TM Gold Service credit monitoring services
Changes made: Applying methods to prevent unauthorized access to your records
Flagged your policy number in our system so that additional verification steps will be used if anyone tries to access your account
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(115 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 16 · first

Montana State AGAug 16 · first · this page

Montana State AG+43d

Massachusetts State AG+43d

Maine State AG+43d

New Hampshire State AG+53d

Pattern: first filing Aug 16 (MA), last Oct 8 (NH) — a 53-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-52.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2021
Raw hash: 0252fd3e83bf8854e66ad833c4792a81bae90a17ffe0bb22a816643c5ba696f1

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityNEW YORK LIFE INSURANCE COMPANY

Victim entityNEW YORK LIFE INSURANCE COMPANY

Incidentdiscovered Apr 23, 2021

Stated responsePromptly had him change his credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov