HERITAGE LIFE INSURANCE COMPANY

Heritage Life Insurance Company notified the California AG of a data breach involving its managed services provider, Inline Network Integration, LLC. Inline detected unusual activity on March 12, 2022, and determined that an unauthorized actor may have acquired customer data hosted on its network. The incident potentially affected individuals' names and other personal information. Inline engaged cybersecurity firms, secured its network, reported to the FBI, and offered credit monitoring services.

Heritage Life Insurance Company, a life insurance provider, reported a data breach affecting 79,019 individuals due to a ransomware attack at one of its IT service vendors. The breach occurred on March 11, 2022, and was discovered the following day. The compromised information included names and driver's license or non-driver identification card numbers. Affected individuals were notified starting on July 14, 2022, and were offered identity theft protection services.

Heritage Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-07-14. 2,099 Massachusetts residents were affected. The report records the breach type as electronic.

Heritage Life Insurance Company notified the California AG of a data breach involving its managed services provider, Inline Network Integration, LLC. On March 12, 2022, Inline detected unusual activity and secured its network. An investigation revealed an unauthorized actor may have acquired customer data, including that of Heritage Life. Affected individuals may have had their name and other personal information exposed. Inline engaged cybersecurity firms, reported to the FBI, and offered credit monitoring.

Heritage Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2022-03-11 and was reported on 2022-07-14. 1,877 Indiana residents were affected. 58,144 individuals affected in total.

Inline Network Integration, LLC notified Montana residents of a March 12, 2022 data security incident involving unauthorized access to its network. The incident may have exposed names and other personal information of customers whose data was hosted on Inline's network. Inline engaged cybersecurity firms, reported the incident to the FBI IC3, and offered credit monitoring services.

Heritage Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2022-07-14. The breach occurred during 3/12/2022 - 4/14/2022. The breach was discovered on 3/12/2022. 58,144 individuals were affected. Notice was sent on 7/14/2022.

Heritage Life Insurance Company submitted a supplemental notice to the Washington AG regarding a ransomware incident at its former IT provider, Inline Network Integration, LLC. The attack exploited Log4Shell (CVE-2021-44228) on March 11, 2022. Encrypted servers contained PII including SSNs, names, driver's licenses, financial accounts, and medical info for 58,144 individuals. 303 Washington residents were notified in this supplemental mailing on October 25, 2022.

Heritage Life Insurance Company reported a data breach affecting 315 Maine residents. The breach was a result of a ransomware attack on one of its IT service vendors, which was discovered on March 12, 2022. The compromised information includes names and Social Security numbers. The company offered 12 months of identity theft and credit monitoring services to the affected individuals.

Heritage Life Insurance Company reported a data breach affecting 58,144 individuals. The incident was a ransomware attack at a third-party IT services vendor. The breach occurred and was discovered on March 12, 2022. Exposed information includes names and Social Security numbers. The company began notifying affected individuals on July 13, 2022, and offered 12 months of identity theft and credit monitoring services.

HERITAGE LIFE INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-435). The register records the breach as discovered on March 12, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.