UNUM GROUP

Unum Group notified South Carolina residents of a cybersecurity incident involving its MOVEit Transfer application (Progress Software). Unauthorized access occurred May 31-June 1, 2023, exploiting a vulnerability to exfiltrate data including names, SSNs, medical info, and financial data. Unum detected suspicious activity on June 1, 2023, and began notifying individuals on August 3, 2023. Response included taking the system offline, patching, and offering 24 months of credit monitoring.

Unum Group notified the California Attorney General of a data breach occurring between May 31 and June 1, 2023. The incident potentially affected California residents, exposing identity information (including Social Security numbers), financial account data, health information, and employment records. Unum is offering 24 months of complimentary Experian IdentityWorks credit monitoring and identity restoration services to affected individuals. The specific cause of the breach and the number of affected individuals are not disclosed in the provided notice.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-19. 320 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group reported a data breach to the Oregon Attorney General. The breach was reported on 2023-09-05. The breach occurred during 5/31/2023 - 6/1/2023. The breach was discovered on 7/22/2023. Notice was sent on 8/3/2023.

Unum Group notified Washington AG of a cybersecurity incident involving the MOVEit Transfer application. The incident exploited a zero-day vulnerability attributed to the CL0P ransomware gang. Unauthorized access occurred between May 15 and June 1, 2023. Data exfiltrated included names, SSNs, medical info, and policy data for 4,186 Washington residents. Unum engaged forensic experts, notified the FBI, and offered 24 months of credit monitoring.

Unum Group reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-31 and was reported on 2023-08-03. 9,667 Indiana residents were affected. 650,521 individuals affected in total.

Unum Group SACE reported to HHS on 2023-08-03 a Hacking/IT Incident affecting 559,315 individuals. Breached information located on Network Server. A software application used by a business associate exposed PHI including names, DOB, addresses, SSNs, claims, and treatment info. CE provided credit monitoring and implemented safeguards.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-11-11. 15 Massachusetts residents were affected. The report records the breach type as paper.

Unum Group reported a data breach to the Indiana Attorney General. The breach occurred on 2022-08-01 and was reported on 2022-11-10. 1 Indiana residents were affected. 822 individuals affected in total.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-01-31. 210 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group notified Delaware residents of a cybersecurity incident where an unknown actor accessed a Unum employee's email account between October 28 and November 15, 2021. Unum discovered the access on November 23, 2021. The incident involved the impermissible access of employee email, potentially exposing customer personal information. Unum secured the account, enhanced security protocols, and provided 24 months of credit monitoring via Experian.

Unum Group reported a data breach to the Indiana Attorney General. The breach occurred on 2021-10-28 and was reported on 2022-01-28. 114 Indiana residents were affected. 34,143 individuals affected in total.

Unum Group ("Unum") reported a data breach to the Oregon Attorney General. The breach was reported on 2022-01-28. The breach occurred during 10/28/2021 - 11/15/2021. The breach was discovered on 11/23/2021. 34,143 individuals were affected. Notice was sent on 1/28/2022.

Unum Group experienced a cybersecurity incident where an unknown external actor accessed a Unum employee's email account between October 28, 2021, and November 15, 2021. Unum discovered the unauthorized access on November 23, 2021. The incident involved the impermissible access of customer information via compromised employee credentials. Unum secured the account, engaged cybersecurity consultants, and offered 24 months of credit monitoring to affected individuals.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-10-02. 10 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group reported a data breach to the Oregon Attorney General. The breach was reported on 2019-12-30. The breach occurred during 10/1/2019 - 10/10/2019. The breach was discovered on 10/10/2019. 8,887 individuals were affected. Notice was sent on 12/23/2019.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-12-24. 13 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group reported to HHS on 2019-01-24 a Hacking/IT Incident affecting 532 individuals. Breached information located on Email. An employee was victim of an email phishing scheme exposing PHI including names, addresses, DOBs, SSNs, and health diagnoses. Unum retained counsel, hired forensic investigators, forced password resets, implemented MFA, and provided HIPAA training.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-12-20. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-10-11. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-09-11. 1 Massachusetts residents were affected. The report records the breach type as paper.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-10-13. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Unum Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-10-09. 1 Massachusetts residents were affected. The report records the breach type as electronic.