The Northwestern Mutual Life Insurance Company
ent_019dea5e3580ae961c22fadf60a54101
Disclosures
25+
State AG · 8 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
62,656
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Northwestern Mutual Life Insurance Company
- Normalized
- the northwestern mutual life insurance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 1DU7IM20QESYGDO4HO54
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- northwesternmutual.com
Disclosure history (newest 25)newest first
- Indiana State AGas victim2024-08-09
The Northwestern Mutual Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-09 and was reported on 2024-08-09. 3 Indiana residents were affected. 1,981 individuals affected in total.
- New Hampshire State AGas victim2024-07-02
Northwestern Mutual filed a supplemental notice with the NH AG regarding a ransomware incident at vendor Infosys McCamish Systems (IMS). Unauthorized access occurred Oct 29-Nov 2, 2023. IMS encrypted systems and exfiltrated data. Northwestern Mutual determined 289 NH residents were impacted. Notification began March 1, 2024, offering credit monitoring.
- California State AGas victim2024-06-27
Northwestern Mutual Life Insurance Company disclosed a ransomware incident affecting its third-party service provider, Infosys McCamish Systems (IMS). Unauthorized access and data acquisition occurred between October 29 and November 2, 2023. IMS systems were encrypted. Northwestern Mutual's internal systems were not compromised. Affected individuals were offered 24 months of identity monitoring.
- New Hampshire State AGas victim2024-03-08
Northwestern Mutual Life Insurance Company reported a cybersecurity incident involving its third-party vendor, Infosys McCamish Systems (IMS). IMS systems were impacted by unauthorized access on or around November 2, 2023. IMS retained forensic and e-discovery firms, disabled systems, and restored services with additional controls. 344 New Hampshire residents' names and addresses may have been impacted. IMS is offering 24 months of free credit monitoring via Kroll. Investigation into whether personal data was exfiltrated is ongoing.
- Indiana State AGas victim2024-03-01
The Northwestern Mutual Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-29 and was reported on 2024-03-01. 1,397 Indiana residents were affected. 62,656 individuals affected in total.
- California State AGas victim2024-02-29
Northwestern Mutual notified customers of a cybersecurity incident at its service provider, Infosys McCamish Systems (IMS), on or around November 2, 2023. An unauthorized party gained access to IMS systems. IMS disabled systems, retained forensic and e-discovery firms, and restored services with enhanced controls. No evidence of continued access was found. Northwestern Mutual's internal systems were not compromised. Identity monitoring services were offered to affected individuals.
- Montana State AGas reporting2024-02-29
Northwestern Mutual notified Montana residents of a cybersecurity incident at third-party vendor Infosys McCamish Systems LLC (IMS) occurring on or around November 2, 2023. IMS systems were accessed by an unauthorized party. IMS disabled systems, engaged forensic and e-discovery firms, and restored services with additional controls. Northwestern Mutual's internal systems were not compromised. Data impact is under review; complimentary identity monitoring is offered.
- Maine State AGas victim2024-02-29
The Northwestern Mutual Life Insurance Company reported a data breach affecting 316 Maine residents due to a security incident at a third-party service provider. The breach occurred between October 29, 2023, and November 2, 2023, and was discovered on February 5, 2024. The company has offered 24 months of credit monitoring and identity theft protection services through Kroll to affected individuals.
- Massachusetts State AGas victim2024-02-29
The Northwestern Mutual Life reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-29. 1,289 Massachusetts residents were affected.
- Oregon State AGas victim2024-02-29
The Northwestern Mutual Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2024-02-29. The breach occurred during 10/29/2023 - 11/2/2023. The breach was discovered on 2/5/2024. 62,656 individuals were affected. Notice was sent on 2/29/2024.
- New Hampshire State AGas reporting2024-02-23
Northwestern Mutual notified NH AG of a ransomware incident at third-party vendor Infosys McCamish Systems (IMS). IMS was informed on Nov 2, 2023. 100 NH residents' PII (name, address, DOB, SSN) potentially impacted. Newport Group administers plans for NM and provided data to IMS. Investigation ongoing; no evidence of data impact confirmed yet. Credit monitoring offered.
- Indiana State AGas victim2024-02-16
The Northwestern Mutual Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-29 and was reported on 2024-02-16. 549 Indiana residents were affected. 24,518 individuals affected in total.
- Massachusetts State AGas victim2024-02-16
The Northwestern Mutual Life reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-16. 475 Massachusetts residents were affected.
- Maine State AGas victim2024-02-16
The Northwestern Mutual Life Insurance Company reported a data breach affecting 28 Maine residents. The breach occurred at a third-party service provider between October 29, 2023, and November 2, 2023. The incident was discovered on January 29, 2024. The company has offered 12 months of identity theft protection services through Experian to those affected.
- Montana State AGas reporting2024-02-16
Newport Group, Inc. (plan recordkeeper) notified participants of a ransomware event at third-party provider Infosys McCamish Systems (IMS) on Nov 2, 2023. IMS systems were isolated, rebuilt, and hardened by Unit 42. EY is investigating data impact. Participants' PII (name, address, DOB, SSN) was provided to IMS. No evidence of impact found yet. IdentityWorks offered.
- New Hampshire State AGas victim2024-02-14
Northwestern Mutual notified NH AG of a cybersecurity incident involving its vendor's vendor, Infosys McCamish Systems (IMS). IMS, a subsidiary of Infosys BPM, provides services to Vanguard, which administers a benefit program for NM's sales force. Unauthorized third-party access to IMS systems was reported on Jan 24, 2024. Investigation ongoing; 2 NH residents potentially impacted. Data types include names/addresses. Proactive notifications and credit monitoring offered.
- Montana State AGas reporting2024-02-07
Northwestern Mutual notifies Montana residents of a cybersecurity incident involving a vendor used by Vanguard, a third-party provider for nonqualified deferred compensation plans. Vanguard engaged forensic investigators. Data potentially impacted includes names, addresses, DOBs, and SSNs. No evidence yet that Northwestern Mutual or Vanguard plan data was specifically affected. Identity protection services offered.
- Massachusetts State AGas victim2024-02-07
The Northwestern Mutual Life reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-07. 31 Massachusetts residents were affected.
- Indiana State AGas victim2024-02-07
The Northwestern Mutual Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-29 and was reported on 2024-02-07. 18 Indiana residents were affected. 887 individuals affected in total.
- Maine State AGas victim2024-02-07
The Northwestern Mutual Life Insurance Company reported a data breach impacting 887 individuals that occurred due to a breach at a third-party service provider. The incident took place between October 29, 2023, and November 2, 2023, and was discovered on January 24, 2024. Affected individuals were notified on February 7, 2024, and offered 12 months of identity protection services through Experian.
- Illinois State AGas victim2024-02-01
NORTHWESTERN MUTUAL LIFE INSURANCE filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-248). The register records the breach as discovered on March 1, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2024-02-01
NORTHWESTERN MUTUAL LIFE INSURANCE filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-091). The register records the breach as discovered on January 29, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Massachusetts State AGas victim2023-10-10
The Northwestern Mutual Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-10. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Indiana State AGas victim2023-08-21
Northwestern Mutual Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-30 and was reported on 2023-08-21. 341 Indiana residents were affected. 9,923 individuals affected in total.
- Massachusetts State AGas victim2023-08-07
Northwestern Mutual Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-07. 322 Massachusetts residents were affected. The report records the breach type as electronic.
Supply-chain cascadesreviewed and confirmed
- The Northwestern Mutual Life Insurance Company’s filing is one of at least 20 in the INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024).
- The Northwestern Mutual Life Insurance Company’s filing is one of at least 96 in the Progress Software Corporation supply-chain incident (2023).