Sun Life Assurance Company of Canada
ent_133482f7d87987fb0f6228a6
Disclosures
5
State AG · 5 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
212,129
nationwide · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Sun Life Assurance Company of Canada
- Normalized
- sun life assurance company of canada— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- ⛰️New Hampshire State AGas victim2023-11-06
Sun Life Assurance Company of Canada filed a supplemental notice with the New Hampshire Attorney General regarding a security breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). The incident stemmed from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. Unauthorized access occurred on May 29-30, 2023, resulting in data exfiltration. The breach affected approximately 212,129 individuals nationwide, including 1,217 New Hampshire residents. Affected data included names and government identifiers. Sun Life and PBI notified affected individuals on or about September 15, 2023, offering credit monitoring services.
- 🌲Washington State AGas victim2023-08-23
Sun Life, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-22 and filed notice on 2023-08-23. 4,097 Washington residents were affected. 62 days elapsed between awareness and notification. 24 days to identify the breach. 0 days to contain the breach.
- 🦫Oregon State AGas victim2023-08-23
Sun Life reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-23. The breach occurred during 5/29/2023 - 5/31/2023. The breach was discovered on 5/30/2023. 202,673 individuals were affected. Notice was sent on 8/23/2023.
- 🌺Hawaii State AGas victim2023-08-22
Sun Life Assurance Company of Canada reported a data breach affecting 3,282 Hawaii residents. A third-party vendor, Pension Benefit Information, LLC (PBI), was compromised via a zero-day vulnerability in Progress Software's MOVEit Transfer software. The incident involved unauthorized access to files containing names, Social Security Numbers, and dates of birth. Sun Life engaged legal counsel, blocked access to PBI, and provided 24 months of credit monitoring to affected individuals. Notifications were sent starting August 21, 2023.
- 🐻California State AGas victim2023-08-21
Sun Life reported a data security breach to the California Attorney General. The filing indicates the breach occurred on May 29, 2023. No further details regarding the nature of the breach, data types affected, or number of individuals impacted were provided in this summary record.