HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPHIHighContained

Pacific Guardian Life Insurance Company, Limited

bd_ffa3307442e5dc99 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 4, 2019

Filed

Feb 17, 2020

To disclose

15 weeks

Affected

1,214state residents only

Linked

3 filings

Confidence

65%

Full breach record for Pacific Guardian Life Insurance Company, Limited →3 incidents on file

Pacific Guardian Life Insurance Co. Ltd. notified the California Attorney General of a data security incident involving unauthorized access to an employee's email account. The company became aware of suspicious activity on November 4, 2019. An investigation confirmed that an unauthorized individual accessed the account and may have viewed or downloaded emails containing personal information, including names, Social Security numbers, and in very few cases, medical information. 1,214 California residents were identified as potentially affected. The company secured the account, engaged forensic investigators, and offered 12 months of credit and identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 4, 2019 → Notified Feb 18, 2020106d ✗ CA 60-day late15 weeks discovery → filing

Incident timeline

discovery → filing · 15 weeks / 105 days

Nov 4, 2019

Begins

Nov 4, 2019

Discovered

Feb 17, 2020

Filed

vs. sector median

+6 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_35e5284b8c3747a62020-02-17Candidate
Massachusetts State AGbd_30a0a79504a48e252020-02-21 · +4dVerified

Name: Pacific Guardian Life Insurance Co. Ltd.
norm: pacific guardian life insurance

Name: Pacific Guardian Life Insurance Company, Limited
norm: pacific guardian life insurance
Industry: Financial Servicesllm

Discovered: Nov 4, 2019
Breach occurred: Nov 4, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 18, 2020
Affected individuals: 1,214state-resident count only
Data types: Identity (basic)Government IDPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified California Attorney General
Initial access: valid_credentials

During the incident: Took steps to secure the email account
Began an internal investigation
Engaged a leading independent digital forensics firm to determine the nature and scope of the incident
Investigated the contents of the account that may have been impacted
Worked diligently to identify address information required to notify the potentially impacted individuals
Offering twelve (12) months of complimentary credit and identity monitoring services to the potentially affected residents
Changes made: Work with cybersecurity experts to independently review the security of its network
Further enhance security levels as deemed necessary to minimize the likelihood of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(105 days from discovery to filing)
Compliance flags: CA 60-day late · 106d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 4, 2019
→ Notified: Feb 18, 2020
106d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 4, 2019 → Notified: Feb 18, 2020	106d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGFeb 17 · first

California State AGFeb 17 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-187404
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2020
Raw hash: 30d74e7ce3e65fc866755a830248dc75dab4a7a0b849ad475702eb66ec29f08a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPacific Guardian Life Insurance Co. Ltd.

Victim entityPacific Guardian Life Insurance Company, Limited

Incidentdiscovered Nov 4, 2019

Stated responseTook steps to secure the email account

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov