HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDMedium

PAN-AMERICAN LIFE INSURANCE GROUP, INC.

bd_fd5d731d6a5e6baf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 19, 2021

Filed

Apr 30, 2021

To disclose

10 weeks

Affected · nationwide

4414 in this filing

Linked

11 filings

Confidence

50%

Full breach record for PAN-AMERICAN LIFE INSURANCE GROUP, INC. →5 incidents on file

Pan-American Life Insurance Group, Inc. experienced an external system breach on February 16, 2021, which was discovered on February 19, 2021. The breach affected 4 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company provided one year of identity theft and credit monitoring services through Experian to the affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 19, 2021 → Filed with AG Apr 30, 202170d ⏱ ME AG >30d10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 3 days

discovery → filing · 10 weeks / 70 days

Feb 16, 2021

Begins

Feb 19, 2021

Discovered

Apr 30, 2021

Filed

vs. sector median

+1 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

New Hampshire State AGbd_4c2efe11d52f8f372021-05-11 · +11dVerified
Maine State AGbd_20a55628c87f9f642021-04-07 · +23dVerified
South Carolina State AGbd_3ae349d38c3488b52021-03-16 · +45dVerified
New Hampshire State AGbd_1b6f9b2256849ef72021-03-15 · +46dVerified

Show 6 more filings ↓up to 50d gap

Massachusetts State AGbd_210f3813699a65032021-03-11 · +50dVerified
California State AGbd_4c420d6a8894a3ff2021-03-11 · +50dVerified
Maine State AGbd_6ad9d6e594b013d22021-03-11 · +50dCandidate
Oregon State AGbd_998b87a09ea02dbb2021-03-11 · +50dVerified
Indiana State AGbd_b9faa419326142022021-03-11 · +50dVerified
Washington State AGbd_ffc6147672576b842021-03-11 · +50dVerified

Name: PAN-AMERICAN LIFE INSURANCE GROUP, INC.
norm: pan american life insurance
Domain: palig.com

Name: PAN-AMERICAN LIFE INSURANCE GROUP, INC.
norm: pan american life insurance
Domain: palig.com
Industry: Financial Servicesllm

Discovered: Feb 19, 2021
Breach occurred: Feb 16, 2021
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 8, 2021
Affected individuals: 441state + nationwide
Data types: Identity (basic)Government ID
Data elements: Driver's licence number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 1 year of identity theft and credit monitoring services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(70 days from discovery to filing)
Compliance flags: ME AG >30d · 70d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 19, 2021
→ Filed with AG: Apr 30, 2021
70d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 19, 2021 → Filed with AG: Apr 30, 2021	70d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

Massachusetts State AGMar 11 · first

California State AGMar 11 · first

Maine State AGMar 11 · first

Oregon State AGMar 11 · first

Indiana State AGMar 11 · first

Washington State AGMar 11 · first

New Hampshire State AG+4d

South Carolina State AG+5d

Maine State AG+27d

Maine State AG+50d · this page

New Hampshire State AG+61d

Pattern: first filing Mar 11 (MA), last May 11 (NH) — a 61-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/764adf0f-493b-4c85-abc8-86071223b625.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 30, 2021
Raw hash: db21d233cffde9a9257c55c103aff89404ae8533a4efcae8515d9dccaf4b48d5

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityPAN-AMERICAN LIFE INSURANCE GROUP, INC.

Victim entityPAN-AMERICAN LIFE INSURANCE GROUP, INC.

Incidentdiscovered Feb 19, 2021

Stated responseOffered 1 year of identity theft and credit monitoring services through Experian

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov