WASHINGTON NATIONAL INSURANCE COMPANY

Washington National Insurance Company notified Montana residents of a SIM swapping attack targeting a senior officer's cellular account on November 29, 2023. The threat actor bypassed MFA and accessed personal information including names, SSNs, dates of birth, and policy numbers. The company disabled access, reset passwords, engaged the FBI and forensic investigators, and offered IDX identity protection services.

Washington National Insurance Company disclosed a data breach affecting 4 New Hampshire residents. On November 29, 2023, the company discovered that a threat actor identified as 'Scattered Spider' conducted a SIM-swapping attack on a senior officer's Verizon cellular account. This allowed the actor to bypass multi-factor authentication and access certain company data, including personal information of residents. The company contained the incident, notified law enforcement (FBI), engaged forensic investigators, and offered identity theft protection services to affected individuals. The attack was targeted at the company itself, not specifically at individual residents' data.

Washington National Insurance reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-01-31. 15 Massachusetts residents were affected.

Washington National Insurance Company reported a data breach affecting 20,360 individuals. The incident, an external system breach (hacking), occurred on November 28, 2023, and was discovered the next day. The compromised information included names and Social Security numbers. The company began notifying affected individuals on January 26, 2024, and offered 12 months of identity theft protection services.

Washington National Insurance Company disclosed that a sophisticated threat actor targeted a senior officer's cellular account via a SIM swapping attack facilitated by a wireless carrier retailer. The actor bypassed multi-factor authentication to access company data, including policyholders' names, SSNs, and dates of birth. The incident was discovered on November 29, 2023. The company engaged law enforcement and forensic investigators, contained the access, and is offering identity theft protection.

Washington National Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-28 and was reported on 2024-01-26. 417 Indiana residents were affected. 20,360 individuals affected in total.

WASHINGTON NATIONAL INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General in January 2024 (case 24-01-049). The register records the breach as discovered on November 29, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Washington National Insurance Company reported an inadvertent disclosure affecting 424 individuals, including 1 Maine resident, on October 6, 2023. Notification was sent on December 5, 2023, offering 12 months of identity theft protection services through IDX (ZeroFox).

Pension Benefit Information, LLC (PBI), a third-party administrator for Washington National Insurance Company, experienced a data breach via a zero-day vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's server on May 29-30, 2023, and downloaded data. PBI patched the vulnerability and notified Washington National, which notified 8 New Hampshire residents on August 3, 2023. Credit monitoring was offered.

Washington National Insurance Company reported an external system breach (hacking) occurring on May 29, 2023, discovered on July 18, 2023. The incident compromised names and Social Security Numbers of 4,150 individuals, including 2 Maine residents. The company provided written notification on August 3, 2023, and offered 12 months of identity monitoring services through Kroll.

Washington National Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-08. 22 Massachusetts residents were affected. The report records the breach type as electronic.

Pension Benefit Information, LLC (PBI) notified Montana residents of a data breach involving MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing a server on May 29-30, 2023 and downloading data. PBI patched servers, investigated, and is offering 12 months of credit monitoring. Data likely included names and government IDs.

Washington National Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-08-03. 53 Indiana residents were affected. 4,150 individuals affected in total.

Washington National Insurance Company reported to HHS on 2016-11-18 a Theft affecting 1458 individuals. Breached information located on Paper/Films.