Sun Life Assurance Company of Canada

Sun Life Assurance Company of reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-08. 1 Massachusetts residents were affected.

Sun Life Financial reported an external system breach (hacking) occurring on May 29-30, 2023, discovered on May 31, 2023. The incident affected 212,129 individuals, including 1,269 Maine residents. Acquired data included names and Social Security Numbers. Sun Life provided written notification and offered 24 months of identity theft protection services. The filing is a supplemental notice submitted to the Maine Attorney General.

Sun Life Assurance Company of Canada filed a supplemental notice with the New Hampshire Attorney General regarding a security breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). The incident stemmed from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. Unauthorized access occurred on May 29-30, 2023, resulting in data exfiltration. The breach affected approximately 212,129 individuals nationwide, including 1,217 New Hampshire residents. Affected data included names and government identifiers. Sun Life and PBI notified affected individuals on or about September 15, 2023, offering credit monitoring services.

Sun Life Assurance Company of Canada reports a supplemental breach involving third-party vendor Pension Benefit Information, LLC (PBI). A threat actor exploited a zero-day vulnerability in Progress Software's MOVEit Transfer software to access PBI's servers on May 29-30, 2023, exfiltrating names, SSNs, and DOBs. Sun Life was notified on June 22, 2023. Final affected count is 212,129 individuals (4,097 in WA). Notifications sent August 21, 2023, including 24 months of credit monitoring.

Sun Life reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-23. The breach occurred during 5/29/2023 - 5/31/2023. The breach was discovered on 5/30/2023. 202,673 individuals were affected. Notice was sent on 8/23/2023.

Sun Life reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-23. 9,388 Massachusetts residents were affected. The report records the breach type as electronic.

Sun Life Assurance Company of Canada notified Hawaii regulators of a data breach involving third-party vendor Pension Benefit Information, LLC (PBI). A threat actor exploited a zero-day vulnerability in Progress Software's MOVEit Transfer software to access PBI's systems on May 29-30, 2023. The incident affected 3,282 Hawaii residents, exposing names, Social Security numbers, and/or dates of birth. Sun Life engaged legal counsel, blocked access to PBI, and offered 24 months of credit monitoring. Notifications were sent on or about August 21, 2023.

Sun Life reported a data security breach to the California Attorney General. The filing indicates the breach occurred on May 29, 2023. No further details regarding the nature of the breach, data types affected, or number of individuals impacted were provided in this summary record.

SUN LIFE ASSURANCE CO. OF CANADA filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-579). The register records the breach as discovered on August 21, 2023. Additional entities named: PBI LLC, MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.