HackingStolen CredentialsRansom PaidData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Horizon Actuarial
bd_ff25b9191ff88ab5 · schema v1 · pii pii-v1
Full breach record for Horizon Actuarial →Horizon Actuarial Services, LLC reported a data breach affecting 6,645 Idaho residents. Unauthorized access occurred on Nov 10-11, 2021, via stolen credentials or exploited vulnerabilities. Stolen data included names, SSNs, DOBs, and bank account numbers. The company paid a ransom to the threat actor, notified the FBI, and provided 12 months of Kroll identity monitoring to affected individuals.
This filing is one of 20 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_3529f9df1be2849bMaine State AGfiled 2022-04-11Verified
- bd_aebae786303bb6acMaine State AGfiled 2022-04-15(4d gap)Verified
- bd_570c80b01bbe9116Maine State AGfiled 2022-04-26(15d gap)Verified
- bd_0137fc9d43a66d3dCalifornia State AGfiled 2022-03-25(17d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 43d gap
- bd_5111b6c88c94f7aaIdaho State AGfiled 2022-03-25(17d gap)Candidate
- bd_3f0edaeb78405833Maine State AGfiled 2022-03-22(20d gap)Verified
- bd_53f26450ae728dacMaine State AGfiled 2022-03-22(20d gap)Verified
- bd_5c05f2edbfa8a93fMaine State AGfiled 2022-03-22(20d gap)Verified
- bd_68e3218b8c9d431dMaine State AGfiled 2022-05-10(29d gap)Verified
- bd_63ec2cad1130c87cMaine State AGfiled 2022-05-24(43d gap)Verified
Showing first 10 of 19 linked disclosures.
Source provenance
- Source URL
- https://ag.idaho.gov/content/uploads/2022/04/04-11-2022-Horizon-Actuarial-Services-LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2022
- Raw hash
- f34d88a3f3c60af9d9662d443affc8c73131c257bf73621e0fdad9e54747dcd9
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Horizon Actuarialnorm: horizon actuarial
- Domain
- horizonactuarial.com
Incident
- Discovered
- Nov 12, 2021
- Materiality determined
- —
- Notification sent
- Jan 13, 2022
- Affected individuals
- 6,645
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- provided notice to the FBIsubmitted supplemental notice of data event to Idaho Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.