Social EngineeringPhishingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
UNUM GROUP
bd_ff9aff859f75440f · schema v1 · pii pii-v1
Full breach record for UNUM GROUP →Unum Group experienced a cybersecurity incident where an unknown actor accessed a Unum employee's email account between October 28, 2021, and November 15, 2021. The breach involved unauthorized access to email contents, potentially exposing customer PII. Unum secured the account, enhanced email security protocols, and provided 24 months of complimentary credit monitoring via Experian to affected individuals.
California clockDiscovered Nov 23, 2021 → Notified Jan 28, 202266d ✗ CA 60-day late9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4eb9e51de187d4a9Delaware State AGfiled 2022-01-28Verified
- bd_bb17019b8fea9cc0Oregon State AGfiled 2022-01-28Candidate
- bd_707b54a4c14096baWashington State AGfiled 2022-01-31(3d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550509
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2022
- Raw hash
- 782c876e6386c9e4dc9344712bd076951da8df9618d08e692b50d96d8940b425
Reporting entity
- Name
- UNUM GROUPnorm: unum group
Victim entity
- Name
- UNUM GROUPnorm: unum group
Incident
- Discovered
- Nov 23, 2021
- Materiality determined
- —
- Notification sent
- Jan 28, 2022
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- CA 60-day late · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 23, 2021→ Notified: Jan 28, 202266d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.