Bankers Life and Casualty Company
ent_42dbccbd73d005077c7723f2
Disclosures
19
State AG · 10 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
799,563
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Bankers Life and Casualty Company
- Normalized
- bankers life and casualty— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- CNO FINANCIAL GROUP, INC.— per SEC Exhibit 21 filing
Disclosure history (19)newest first
- South Carolina State AGas victim2024-02-12
Bankers Life and Casualty Company notified South Carolina residents of a SIM swapping attack targeting a senior officer's cellular account on November 29, 2023. The attacker bypassed MFA to access company data, potentially exposing names, SSNs, DOBs, and policy numbers. The company disabled access, reset passwords, engaged the FBI and forensic investigators, and offered credit monitoring.
- Massachusetts State AGas victim2024-01-31
Bankers Life and Casualty Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-01-31. 152 Massachusetts residents were affected.
- Montana State AGas victim2024-01-30
Bankers Life and Casualty Company notified Montana residents of a SIM swapping attack targeting a senior officer's cellular account on November 29, 2023. The threat actor bypassed MFA to access company data, potentially exposing names, SSNs, DOBs, and policy numbers. The company engaged the FBI, disabled access, reset passwords, and offered identity theft protection.
- Washington State AGas victim2024-01-30
Bankers Life and Casualty Company reported a cyberattack in Washington affecting 865 residents. A sophisticated threat actor conducted a SIM-swapping attack targeting a senior officer's cellular account on Nov 28-29, 2023, to bypass MFA and access company data. Personal info including names, SSNs, DOBs, and policy numbers may have been involved. Notices sent Jan 26, 2024.
- Maine State AGas victim2024-01-30
Bankers Life and Casualty Company reported an external system breach (hacking) on November 28, 2023, discovered on November 29, 2023. The incident affected 45,842 individuals, including 69 Maine residents. Acquired information included names and Social Security Numbers. The company provided written notification on January 26, 2024, and offered 12 months of credit monitoring and identity theft recovery services through IDX/ZeroFox.
- New Hampshire State AGas victim2024-01-30
Bankers Life and Casualty Company disclosed a security breach discovered on November 29, 2023, involving a SIM-swapping attack on a senior officer's Verizon cellular account. The threat actor, identified as 'Scattered Spider,' bypassed multi-factor authentication to access company data, potentially affecting 63 New Hampshire residents. The company contained the incident, notified law enforcement (FBI), and engaged forensic investigators. No evidence suggests customer environments were accessed or that individuals were targeted for fraud.
- California State AGas victim2024-01-29
Bankers Life and Casualty Company disclosed a breach involving a SIM swapping attack on a senior officer's cellular account. The threat actor bypassed multi-factor authentication to access company data, including customer names, SSNs, dates of birth, and policy numbers. The incident was discovered on November 29, 2023. The company engaged law enforcement and forensic investigators, contained the access, and offered identity protection services.
- Oregon State AGas victim2024-01-29
Bankers Life and Casualty Company reported a data breach to the Oregon Attorney General. The breach was reported on 2024-01-29. The breach occurred during 11/28/2023 - 11/29/2023. The breach was discovered on 11/29/2023. 45,842 individuals were affected. Notice was sent on 1/26/2024.
- Indiana State AGas victim2024-01-26
Bankers Life and Casualty Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-28 and was reported on 2024-01-26. 1,710 Indiana residents were affected. 45,842 individuals affected in total.
- Indiana State AGas victim2021-12-30
Bankers Life and Casualty Company reported a data breach to the Indiana Attorney General. The breach occurred on 2021-09-29 and was reported on 2021-12-30. 2 Indiana residents were affected. 377 individuals affected in total.
- Maine State AGas victim2021-12-30
On September 29, 2021, Bankers Life and Casualty Company experienced a business email compromise incident, which was discovered on October 4, 2021. The breach resulted in unauthorized access to personal information, including names and Social Security numbers, affecting 377 individuals. The company began notifying affected individuals on December 30, 2021, and offered 12 months of identity theft protection services through IDX.
- Massachusetts State AGas victim2021-12-30
Bankers Life and Casualty Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-12-30. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2019-08-16
Bankers Life and Casualty Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-08-16. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Hawaii State AGas victim2018-10-31
Bankers Life and Casualty Company notified policyholders and applicants that unauthorized third parties accessed employee credentials between May 30 and September 13, 2018. The attackers used stolen credentials to access company websites, potentially exposing names, addresses, DOB, insurance info, and partial SSNs. Discovery was August 7, 2018; notification was delayed due to federal law enforcement investigation. Free credit monitoring offered.
- South Carolina State AGas victim2018-10-26
Bankers Life and Casualty Company notified policyholders that unauthorized third parties accessed employee credentials between May 30 and September 13, 2018, gaining access to personal information including names, addresses, DOB, insurance details, and partial SSNs. The company discovered the incident on August 7, 2018, delayed notification at the request of federal law enforcement, and offered one year of credit monitoring.
- Oregon State AGas victim2018-10-25
Bankers Life reported a data breach to the Oregon Attorney General. The breach was reported on 2018-10-25. The breach occurred during 5/30/2018 - 5/30/2018. The breach was discovered on 8/7/2018. 799,563 individuals were affected. Notice was sent on 10/25/2018.
- California State AGas victim2018-10-25
Bankers Life and Casualty Company disclosed that unauthorized third parties accessed employee credentials between May 30 and September 13, 2018, using them to access company websites and potentially view policyholder data. The incident was discovered on August 7, 2018. Affected data included names, addresses, dates of birth, insurance information, and the last four digits of Social Security numbers. Full SSNs, bank account numbers, and credit card information were not accessed. The company engaged forensic investigators, notified law enforcement, and offered one year of identity repair and credit monitoring.
- Massachusetts State AGas victim2016-10-17
Bankers Life and Casualty Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-10-17. 3 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2015-12-18
Bankers Life and Casualty Co reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-12-18. 1 Massachusetts residents were affected. The report records the breach type as electronic.