The Union Labor Life Insurance Company
ent_cb4cf31b90ee90077ee93c83
Disclosures
11
State AG · HHS OCR · 4 jurisdictions
Multi-filing incidents
6
incidents joining 2+ filings here
Max affected reported
186,900
nationwide · HHS OCR MD
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Union Labor Life Insurance Company
- Normalized
- the union labor life insurance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- ullico.com
Disclosure history (11)newest first
- Indiana State AGas victim2025-03-19
The Union Labor Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-17 and was reported on 2025-03-19. 4 Indiana residents were affected. 87 individuals affected in total.
- California State AGas victim2024-06-25
The Union Labor Life Insurance Company notified affected individuals that its third-party administrator, InfoSys/McCamish Systems LLC (IMS), suffered a ransomware attack between October 29 and November 2, 2023. IMS processed personal information on behalf of the Company for individual supplemental insurance products. The Company received notice of the incident on June 13, 2024. Affected individuals may have been policyholders, claimants, or beneficiaries. Complimentary Equifax credit monitoring was offered.
- Indiana State AGas victim2023-10-29
The Union Labor Life Insurance Company reported a data breach to the Indiana Attorney General. 486 Indiana residents were affected. 53,458 individuals affected in total.
- California State AGas victim2023-07-10
The Union Labor Life Insurance Company reported a data breach to the California Attorney General. The incident occurred between May 29, 2023, and May 30, 2023. The filing provides only the organization name and breach dates; no details regarding the nature of the breach, data types affected, or number of individuals impacted are disclosed in this record.
- California State AGas victim2019-06-26
The Union Labor Life Insurance Company reported that on April 1, 2019, an unauthorized external user accessed an employee's Outlook email account via a fraudulent link from a trusted business partner. The incident potentially exposed personal information of participants in medical stop loss or group life insurance policies, including names, addresses, and possibly Social Security numbers. The company disabled the account within 90 minutes, engaged forensic investigators, and offered 24 months of credit monitoring.
- MARYLANDHHS OCRas victim2019-05-31
The Union Labor Life Insurance Company reported to HHS on 2019-05-31 a Hacking/IT Incident affecting 186,900 individuals. Breached information located on Email. An employee was victim of phishing, leading to unauthorized access of ePHI including names, DOBs, addresses, SSNs, diagnoses, and treatment info.
- California State AGas victim2017-10-27
On June 22, 2017, an unauthorized external user accessed an employee's Outlook email account at The Union Labor Life Insurance Company. The attacker sent spam emails with malicious links to contacts. A forensic review determined that the attacker may have viewed emails containing personal information, including names, SSNs, and PHI (claim numbers, diagnosis codes), of individuals. The company disabled the account, reset passwords, engaged forensic investigators, and offered 24 months of identity protection services.
- MARYLANDHHS OCRas victim2017-10-19
The Union Labor Life Insurance Company reported to HHS on 2017-10-19 a Unauthorized Access/Disclosure affecting 664 individuals. Breached information located on Email.
- MARYLANDHHS OCRas victim2014-06-27
The Union Labor Life Insurance Company (MD) reported to HHS OCR on 2014-06-27 a Theft incident affecting 42,713 individuals. Breached information was located on a Laptop. No business associate was identified as present. No further detail is available from the HHS web description.
- California State AGas victim2014-06-12
The Union Labor Life Insurance Company reported a data breach to the California Attorney General occurring on February 17, 2014. The incident involved the exposure of personally identifiable information (PII) and protected health information (PHI). The specific attack vector, number of affected individuals, and response actions are not detailed in the provided filing summary or attachments.
- New Hampshire State AGas victim2014-06-12
Union Labor Life Insurance Company reported the potential theft of a laptop from its Silver Spring, MD offices on February 17, 2014. The laptop contained backup emails with personal data of 16 New Hampshire residents, including names, addresses, dates of birth, and social security numbers. The company notified the Montgomery County Police and offered 12 months of credit monitoring via AllClear ID. An internal investigation is ongoing.
Supply-chain cascadesreviewed and confirmed
- The Union Labor Life Insurance Company’s filing is one of at least 19 in the INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024).