QBE North America

QBE North America notified the NH AG of a ransomware attack on third-party administrator Gallagher Bassett. Unauthorized access to QBE client data occurred between June 3 and Sept 26, 2020. Impacted data includes SSNs, medical info, and health insurance info. QBE is notifying affected individuals and offering 24 months of credit monitoring.

Rosewood Hotel Group notified Montana residents of a data breach involving Sabre Hospitality Solutions. Unauthorized access to guest reservation data (names, payment card info) occurred between May 2016 and Jan 2017. Rosewood was notified in late Dec 2017. No specific count of affected individuals was disclosed in this filing.

QBE North America notified Montana residents of a phishing attack on July 19, 2017, which compromised employee email credentials. The attacker accessed mailboxes containing personal data of policyholders. QBE reset passwords, contained the incident, and offered two years of Experian IdentityWorks services to affected individuals.

QBE North America filed a supplemental notice with the New Hampshire Attorney General regarding a phishing incident that occurred on May 31, 2017. The attack targeted employee email accounts, leading to unauthorized access. The filing identifies a total of two New Hampshire residents impacted. The first was notified in July 2017; the second was notified on September 7, 2017. The investigation was completed on September 12, 2017.

QBE North America reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-08-25. 2 Massachusetts residents were affected. The report records the breach type as electronic.

QBE North America notified Montana residents of a phishing attack on May 31, 2017, which compromised five employee email accounts. The incident exposed customers' names, addresses, dates of birth, emails, and driver's license numbers contained in aviation insurance correspondence. QBE reset passwords and offered two years of Experian IdentityWorks services.

QBE North America notified the NH Attorney General of a phishing attack on May 31, 2017, targeting employee email accounts. Credentials for five accounts were compromised, and mailboxes were accessed from Lagos, Nigeria. The incident affected one New Hampshire resident, whose PII (including government ID data on pilot record forms) was accessed. QBE reset passwords and is providing phishing training.