Oxford Life Insurance Company

Oxford Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-14. 300 Massachusetts residents were affected.

Oxford Life Insurance Company notified consumers that an unauthorized person accessed its IT network for approximately one hour on February 20, 2025, and copied files. The company contained the activity and engaged a third-party cybersecurity firm. A review completed on April 17, 2025, determined that the files contained personal information. The company is offering one year of complimentary identity protection services through Experian IdentityWorks and has implemented additional security safeguards.

Oxford Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2025-05-13. The breach occurred during 2/20/2025 - 2/20/2025. The breach was discovered on 4/18/2025. 25,659 individuals were affected. Notice was sent on 5/13/2025.

Oxford Life Insurance Company notified the NH Attorney General of a cybersecurity event on Feb 20, 2025. An external threat actor used social engineering (impersonating a collections company) to gain unauthorized access to an employee's computer and Oxford's network for approximately one hour. The actor copied files containing personal information of policyholders, claimants, and agents in New Hampshire. The incident did not involve ransomware. Oxford engaged a third-party forensic firm, contained the activity, and is offering identity restoration services.

Oxford Life Insurance Company reported that an unauthorized person accessed its IT network for approximately one hour on February 20, 2025, and copied files. The company engaged a third-party cybersecurity firm to investigate and contained the activity. A review completed on April 17, 2025, determined that personal information was involved. The company is offering one year of complimentary identity protection services to affected individuals.

Oxford Life Insurance Company reported a social engineering attack in Maine affecting 30 residents. The breach occurred on Feb 20, 2025, when an attacker impersonated a collections company to gain network access. Data exposed included names and SSNs. Notifications were sent on May 13, 2025, with credit monitoring offered.

Oxford Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-20 and was reported on 2025-05-13. 797 Indiana residents were affected. 25,659 individuals affected in total.

Oxford Life Insurance Company notified the Iowa AG of a cybersecurity incident on May 13, 2025. On Feb 20, 2025, a social engineering attack allowed an unauthorized actor to access the network for one hour and copy files. Affected data included names, SSNs, and financial account numbers for 511 Iowa residents. Oxford engaged forensic investigators, contained the breach, and offered one year of credit monitoring.

Oxford Life Insurance Company experienced a phishing incident on February 20, 2025, where an unauthorized actor accessed its IT network for approximately one hour and copied files containing names and Social Security numbers of 419 Nebraska residents. Oxford contained the breach, engaged forensic investigators, notified affected individuals on May 13, 2025, and offered one year of credit monitoring through Experian.

OXFORD LIFE INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General in May 2025 (case 25-05-151). The register records the breach as discovered on April 18, 2025. Personal information types reported: drivers license, financial account number, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.