PAN-AMERICAN LIFE INSURANCE GROUP, INC.

Pan-American Life Insurance Company based in New Orleans, Louisiana, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-10-27 and reported on 2026-03-23. 564 Texas residents were affected. 5,809 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information;Other;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail.

Pan-American Life Insurance Group notified NH AG of a data incident involving the MOVEit Transfer zero-day vulnerability exploited by an unauthorized third party to exfiltrate personal information (including SSNs and DOBs) of 48 NH residents. Notifications sent Dec 4, 2023, offering 24 months credit monitoring.

Pan-American Life Insurance Group (PALIG) notified the Washington AG of a data security incident involving the MOVEit Transfer vulnerability exploited by an unauthorized third party. The breach affected 616 Washington residents, exposing PII including SSNs, driver's licenses, medical info, and financial data. PALIG patched the vulnerability, engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.

Pan-American Life Insurance Group, Inc. reported to HHS on 2023-12-04 a Hacking/IT Incident affecting 94,807 individuals. Breached information located on Network Server. A software application used by a business associate exposed PHI including names, DOB, SSN, diagnoses, and financial data. CE and BA provided credit monitoring and implemented safeguards.

Pan-American Life Insurance Company (PALIC) notified California residents of a data breach involving the MOVEit Transfer application by Progress Software. An unauthorized third party exploited a previously unknown vulnerability in MOVEit to exfiltrate files containing personal information, including names, addresses, SSNs, dates of birth, driver's license numbers, medical information, biometric data, and financial account details. The breach occurred on May 28, 2023. PALIC stopped using MOVEit, secured other systems, engaged cybersecurity experts, and notified law enforcement. Affected individuals are offered 24 months of Experian IdentityWorks.

Pan-American Life Insurance Group, Inc. reported to HHS on 2023-12-04 a Hacking/IT Incident affecting 105,387 individuals. Breached information located on Network Server. A software application used by a business associate exposed PHI including names, DOB, addresses, SSN, driver's license, diagnoses, lab results, medications, and financial/claims data. The entity and BA provided complimentary credit monitoring and implemented additional safeguards.

Pan-American Life Insurance Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-04. 179 Massachusetts residents were affected. The report records the breach type as electronic.

Pan-American Life Insurance Group reported a data breach to the Oregon Attorney General. The breach was reported on 2023-12-04. The breach occurred during 5/28/2023 - 5/31/2023. The breach was discovered on 6/1/2023. 105,387 individuals were affected. Notice was sent on 1/1/0001.

Pan-American Life Insurance Group, Inc. reported an external system breach (hacking) occurring on May 28, 2023, discovered on June 1, 2023. The incident affected 105,387 individuals, including 370 Maine residents. Compromised data included names and financial account or credit/debit card numbers. The company provided written notification and offered two years of credit monitoring and identity theft restoration services through Experian.

Pan-American Life Insurance Company (PALIC) notified Montana residents of a data security incident involving the MOVEit Transfer application. An unauthorized third party exploited a previously unknown vulnerability in MOVEit to exfiltrate files containing personal information, including names, SSNs, driver's license numbers, medical/benefits info, biometric data, and financial account details. PALIC secured systems, engaged forensic experts, notified law enforcement, and is offering 24 months of Experian IdentityWorks. No evidence of fraudulent use was found at the time of notification.

PAN-AMERICAN LIFE INSURANCE GROUP filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-816). The register records the breach as discovered on May 30, 2023. Additional entities named: MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

palig.com

Pan-American Life Insurance Group (PALIG) filed a supplemental notice with the New Hampshire Attorney General regarding a data security incident. PALIG confirmed that while personal information (names, addresses, DOBs) was exfiltrated, no NH residents were among those whose more sensitive personal information was taken. The incident involved unauthorized access and data exfiltration.

Pan-American Life Insurance Group, Inc. experienced an external system breach on February 16, 2021, which was discovered on February 19, 2021. The breach affected 4 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company provided one year of identity theft and credit monitoring services through Experian to the affected individuals.

Pan-American Life Insurance Group, Inc. reported an external system breach that occurred from February 16 to February 19, 2021. The incident, discovered on February 19, 2021, affected 240 U.S. individuals. The compromised information included names in combination with financial account or card numbers and their associated access codes. Affected individuals were notified in writing on April 8, 2021, and offered one year of identity theft protection services from Experian.

Pan-American Life Insurance Group notified South Carolina residents of a March 9, 2021 data security incident. A phishing attempt led to malware installation and exfiltration of sensitive personal information, including SSNs, for a small percentage of individuals. The company took its network offline, engaged forensic experts, and offered one year of credit monitoring.

Pan-American Life Insurance Group (PALIG) notified the NH Attorney General of a cybersecurity incident detected on February 19, 2021. A phishing attempt led to malware installation; defenses limited its impact. Exfiltrated data included names, addresses, dates of birth, and potentially sensitive info for a small subset of ~51 NH policyholders. PALIG took systems offline, engaged forensic experts, and offered credit monitoring to affected individuals.

Pan-American Life Insurance Group, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-11. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Pan-American Life Insurance Group experienced a data security incident detected on February 19, 2021, following a phishing attempt that resulted in malware installation. Unauthorized access occurred on February 16, 2021. The attacker exfiltrated personal information including names, addresses, dates of birth, and for a small percentage of individuals, more sensitive data such as Social Security numbers. The company took systems offline, engaged forensic experts, and offered credit monitoring to affected policyholders and beneficiaries.

Pan-American Life Insurance Group, Inc. reported a data breach affecting 46 Maine residents. The breach, which occurred between February 16, 2021, and February 19, 2021, was an external system breach (hacking) discovered on February 19, 2021. The compromised information included names combined with driver's license or non-driver identification card numbers. The company offered one year of identity theft and credit monitoring services from Experian to those affected.

Pan-American Life Insurance Group reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-11. The breach occurred during 2/16/2021 - 2/19/2021. The breach was discovered on 2/19/2021. 78,193 individuals were affected. Notice was sent on 3/11/2021.

Pan-American Life Insurance Group, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-16 and was reported on 2021-03-11. 1,396 Indiana residents were affected. 78,874 individuals affected in total.

Pan-American Life Insurance Group (PALIG) filed a supplemental notice with the Washington AG regarding a phishing-induced malware incident. Suspicious activity was detected on Feb 19, 2021. The attack resulted in the exfiltration of names, addresses, DOBs, and sensitive data (SSN, driver's license, financial accounts, medical info) for 599 individuals. PALIG took systems offline, engaged forensic experts, and offered credit monitoring.

PAN-AMERICAN LIFE INSURANCE GROUP filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-159). The register records the breach as discovered on March 11, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.