Delaware Life

Delaware Life Insurance Company reported a ransomware cyberattack affecting 7,252 Washington residents. Unauthorized access occurred between Nov 30, 2022, and Feb 9, 2023. The incident involved data encryption and exfiltration of PII including names, SSNs, and DOBs. The company engaged forensic investigators, notified the FBI, and offered 24 months of identity protection services.

Delaware Life Insurance Company experienced a ransomware attack on its IT infrastructure. The company detected the malware on February 9, 2023, though the breach date listed in the state filing is November 30, 2022. An unauthorized actor accessed and acquired files containing personal information, including names, addresses, dates of birth, and Social Security numbers of agents and policyholders. The company engaged forensic experts, notified the FBI and regulators, and is offering 24 months of identity theft protection services to affected individuals.

Delaware Life Insurance Company notified individuals of a ransomware incident detected on February 9, 2023. Unauthorized actors accessed and acquired files containing PII (name, address, DOB, SSN). The company engaged forensic investigators, notified the FBI, and is offering 24 months of identity protection services. Notices were sent on November 21, 2023.

Delaware Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-11-21. The breach occurred during 11/30/2022 - 2/9/2023. The breach was discovered on 2/9/2023. 382,574 individuals were affected. Notice was sent on 7/28/202311/21/2023.

Delaware Life Insurance Company notified the California AG of a data breach affecting its customers. The incident resulted from a vulnerability in Progress Software's MOVEit Transfer tool, exploited by an unauthorized third party on May 29-30, 2023. PBI, a service provider for Delaware Life, confirmed data was downloaded. Affected data includes names and other basic identity information. The company patched servers, investigated the scope, and is offering 24 months of identity monitoring via Kroll.

Delaware Life Insurance Company filed a supplemental notice to the Washington AG regarding a breach at its vendor, PBI Research Services. The CLOP threat group exploited a zero-day SQL injection vulnerability (CVE-2023-34362) in MOVEit Transfer software between May 29-30, 2023, exfiltrating personal data. 4,518 Washington residents were notified. PBI engaged Kroll for forensics and offered credit monitoring.

Delaware Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-09-06. 4,107 Indiana residents were affected. 234,186 individuals affected in total.

Delaware Life Insurance Company notified the California AG of a data breach affecting its customers. The incident resulted from an exploit of a vulnerability in Progress Software's MOVEit Transfer product, a third-party service used by Pension Benefit Information (PBI), a vendor for Delaware Life. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data containing names and other personal information. PBI discovered the vulnerability on May 31, 2023, when Progress Software disclosed it. PBI patched servers, investigated the scope, and is offering 24 months of identity monitoring to affected individuals.

Pension Benefit Information, LLC (PBI) disclosed a third-party data breach involving its MOVEit Transfer software provider, Progress Software. An unauthorized third party exploited a vulnerability in MOVEit to access a server on May 29-30, 2023, and downloaded data. PBI notified affected individuals on September 6, 2023, offering 24 months of identity monitoring. Data types affected include basic identity information.

Delaware Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2022-11-30 and was reported on 2023-07-28. 368 Indiana residents were affected. 19,184 individuals affected in total.

Delaware Life Insurance Company notified individuals of a ransomware incident detected on February 9, 2023. The attacker accessed and acquired files containing names, addresses, dates of birth, SSNs, and policy numbers. The company engaged forensic investigators, notified the FBI and regulators, and offered 24 months of identity theft protection services. Notification letters were sent on July 28, 2023.

Delaware Life Insurance Company experienced a ransomware incident. The breach occurred on November 30, 2022, and was discovered on February 9, 2023. An unauthorized actor accessed and acquired files containing personal information, including names, addresses, dates of birth, and Social Security numbers of policyholders and agents. The company engaged forensic investigators, notified the FBI, and is offering 24 months of identity protection services.

Delaware Life Insurance Company notified policyholders of a ransomware incident discovered on February 9, 2023, involving the MOVEit Transfer software. The breach exposed names, addresses, DOBs, SSNs, and policy numbers. The company engaged forensic investigators, alerted the FBI, and offered 24 months of identity protection services. A separate May 2023 MOVEit incident was also referenced. Rhode Island residents were specifically identified as impacted.

Delaware Life - Delaware Life - Home

Founded in 2013, Delaware Life Insurance Company is a subsidiary of Group 1001 Insurance Holdings,LLC (Group 1001) a dynamic network of businesses making insurance more useful, logical, and accessible for everyone. As of June 30, 2022, the company had assets of $41.8 billion and liabilities of $39.7 billion (does not include Delaware Life Insurance Company of New York) with more than 320,000 active annuity and life insurance policies.

Delaware Life Insurance Company is a leading provider of annuity and life insurance products in the United States. The company was established in connection with the purchase by Delaware Life Holdings, LLC of the domestic U.S. annuity business and ce...

delawarelife.com

Delaware Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-09. 770 Massachusetts residents were affected. The report records the breach type as electronic.

DELAWARE LIFE INS. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-493). The register records the breach as discovered on May 30, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

DELAWARE LIFE INS. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-617). The register records the breach as discovered on June 20, 2023. Additional entities named: MOVEIT, PBI (SUPPLEMENTAL TO #23-493). Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Delaware Life Insurance Company notified the NH Attorney General that a third-party vendor, Mediant Communications, suffered a breach on April 1, 2019, when an unknown malicious party exploited a vulnerability in Mediant's email software to access four business email accounts. The incident affected 107 New Hampshire residents, exposing names, addresses, dates of birth, Social Security numbers, and account/policy numbers. Mediant engaged forensic investigators, contained the incident by disconnecting servers, and reported to the FBI. Delaware Life sent notices on June 19, 2019, and offered two years of credit monitoring.