American National Insurance Company

American National Group, LLC was affected by the MOVEit Transfer zero-day vulnerability (announced May 31, 2023) exploited by an unauthorized third party on May 28, 2023. Customer files containing names, SSNs, dates of birth, addresses, and medical treatment information were acquired. The company took MOVEit offline, engaged incident response professionals, and notified law enforcement. Affected individuals were offered 24-month Experian IdentityWorks credit monitoring.

American National Insurance Company notified Hawaii residents of a cybersecurity incident involving a vulnerability in the third-party MOVEit Transfer application (Progress Software). Unauthorized access occurred on May 28, 2023, exposing personal information including names, SSNs, DOBs, and addresses. The company took the system offline, engaged forensic advisors, and offered two years of credit monitoring.

American European Insurance Group reported an external system breach (hacking) occurring on September 18, 2020. The incident affected 16,414 individuals, including 5 Maine residents. The breach compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs). The company provided written notification and offered 12 months of credit monitoring and identity theft protection services through IDX.