LUMICO LIFE INSURANCE COMPANY

Lumico Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-13. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Lumico Life Insurance Company, Elips Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-14. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/26/2023. 374,675 individuals were affected. Notice was sent on 7/28/2023.

Lumico Life Insurance Company notified Hawaii residents of a data breach involving its third-party vendor NTT Data Services and sub-vendor Pension Benefits Information, LLC. Cyber criminals exploited a vulnerability in MOVEit Transfer application between May 29-30, 2023. Lumico discovered the incident on June 19, 2023. Impacted data included names, SSNs, DOBs, addresses, and policy numbers. Lumico activated incident response protocols and offered two years of Kroll identity monitoring.

Lumico Life Insurance Company notified South Carolina residents of a data breach involving its third-party vendor NTT Data Services and sub-vendor Pension Benefits Information, LLC. Cyber criminals exploited a vulnerability in MOVEit Transfer software between May 29-30, 2023. Lumico discovered the incident on June 19, 2023. Impacted data included names, gender, SSNs, DOBs, addresses, and policy numbers. Lumico activated incident response protocols and offered two years of Kroll identity monitoring.

Lumico Life Insurance Company disclosed that a third-party service provider (NTT Data Services) and its sub-vendor (Pension Benefits Information, LLC) were compromised via an exploit of the MOVEit Transfer application vulnerability. The incident occurred between May 29-30, 2023, and was discovered on June 19, 2023. Policyholder data including names, SSNs, DOBs, and addresses was exfiltrated. Lumico engaged Kroll for identity monitoring and notified regulators.

Lumico Life Insurance Company, Elips Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-01. 4,205 Massachusetts residents were affected. The report records the breach type as electronic.

Lumico Life Insurance Company, Elips Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-28. 8,713 Indiana residents were affected. 361,094 individuals affected in total.

Lumico Life Insurance Company reported a third-party breach involving MOVEit Transfer vulnerability exploitation by NTT Data Services' vendor. Unauthorized access occurred May 29-30, 2023, affecting policyholder PII including SSNs and DOBs. 6,209 Washington residents impacted. Lumico activated incident response and provided Kroll identity monitoring.

Lumico Life Insurance Company disclosed a breach involving its third-party vendor, NTT Data Services, and sub-vendor Pension Benefits Information, LLC. Between May 29-30, 2023, attackers exploited a vulnerability in MOVEit Transfer software to access policyholder data. Lumico discovered the incident on June 19, 2023, and confirmed data acquisition on June 30, 2023. Affected data includes names, SSNs, dates of birth, addresses, and policy numbers. Lumico engaged Kroll for two years of credit monitoring and notified regulators and law enforcement.

Lumico Life Insurance Company notified policyholders in multiple states (including Delaware, NY, MD, DC, NC, RI, NM) of a MOVEit Transfer vulnerability exploited by cyber criminals. The breach occurred May 29-30, 2023, via third-party provider NTT Data Services and its vendor PBI. Impacted data included names, SSNs, DOBs, addresses, and policy numbers. Lumico engaged Kroll for two years of identity monitoring and notified law enforcement and state regulators. The incident is contained.