The Union Labor Life Insurance Company
ent_cb4cf31b90ee90077ee93c83
Disclosures
20
State AG · HHS OCR · 7 jurisdictions
Multi-filing incidents
6
incidents joining 2+ filings here
Max affected reported
186,900
nationwide · State AG WA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Union Labor Life Insurance Company
- Normalized
- the union labor life insurance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- ullico.com
Disclosure history (20)newest first
- Massachusetts State AGas victim2025-03-20
The Union Labor Life Insurance reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-20. 10 Massachusetts residents were affected.
- Indiana State AGas victim2025-03-19
The Union Labor Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-17 and was reported on 2025-03-19. 4 Indiana residents were affected. 87 individuals affected in total.
- Illinois State AGas victim2024-11-01
THE UNION LABOR LIFE INSURANCE CO. filed a data-breach notice with the Illinois Attorney General in November 2024 (case 24-11-044). The register records the breach as discovered on October 29, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- California State AGas victim2024-06-25
The Union Labor Life Insurance Company notified affected individuals that its third-party administrator, InfoSys/McCamish Systems LLC (IMS), suffered a ransomware attack between October 29 and November 2, 2023. IMS processed personal information on behalf of the Company for individual supplemental insurance products. The Company received notice of the incident on June 13, 2024. Affected individuals may have been policyholders, claimants, or beneficiaries. Complimentary Equifax credit monitoring was offered.
- Massachusetts State AGas victim2024-06-25
The Union Labor Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-25. 451 Massachusetts residents were affected.
- Indiana State AGas victim2023-10-29
The Union Labor Life Insurance Company reported a data breach to the Indiana Attorney General. 486 Indiana residents were affected. 53,458 individuals affected in total.
- Massachusetts State AGas victim2023-07-12
The Union Labor Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-12. 384 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2023-07-10
The Union Labor Life Insurance Company reported a data breach to the California Attorney General. The incident occurred between May 29, 2023, and May 30, 2023. The filing provides only the organization name and breach dates; no details regarding the nature of the breach, data types affected, or number of individuals impacted are disclosed in this record.
- Indiana State AGas victim2023-05-29
The Union Labor Life Insurance Company reported a data breach to the Indiana Attorney General. 422 Indiana residents were affected. 15,800 individuals affected in total.
- Massachusetts State AGas victim2019-12-23
The Union Labor Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-12-23. 263 Massachusetts residents were affected. The report records the breach type as electronic.
- Washington State AGas victim2019-09-09
The Union Labor Life Insurance Company reported a phishing incident where an employee's email account was compromised on April 1, 2019. The attacker accessed contact info and sent spam. Forensic review found PHI, SSNs, and PII in the mailbox. 186,900 individuals affected nationwide, including 615 in Washington. Notifications and credit monitoring were offered.
- California State AGas victim2019-06-26
The Union Labor Life Insurance Company reported that on April 1, 2019, an unauthorized external user accessed an employee's Outlook email account via a fraudulent link from a trusted business partner. The incident potentially exposed personal information of participants in medical stop loss or group life insurance policies, including names, addresses, and possibly Social Security numbers. The company disabled the account within 90 minutes, engaged forensic investigators, and offered 24 months of credit monitoring.
- Massachusetts State AGas victim2019-06-25
The Union Labor Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-06-25. 13 Massachusetts residents were affected. The report records the breach type as electronic.
- MARYLANDHHS OCRas victim2019-05-31
The Union Labor Life Insurance Company reported to HHS on 2019-05-31 a Hacking/IT Incident affecting 186,900 individuals. Breached information located on Email. An employee was victim of phishing, leading to unauthorized access of ePHI including names, DOBs, addresses, SSNs, diagnoses, and treatment info.
- Illinois State AGas victim2019-01-01
THE UNION LABOR LIFE INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-240). The register records the breach as discovered on April 1, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- California State AGas victim2017-10-27
On June 22, 2017, an unauthorized external user accessed an employee's Outlook email account at The Union Labor Life Insurance Company. The attacker sent spam emails with malicious links to contacts. A forensic review determined that the attacker may have viewed emails containing personal information, including names, SSNs, and PHI (claim numbers, diagnosis codes), of individuals. The company disabled the account, reset passwords, engaged forensic investigators, and offered 24 months of identity protection services.
- MARYLANDHHS OCRas victim2017-10-19
The Union Labor Life Insurance Company reported to HHS on 2017-10-19 a Unauthorized Access/Disclosure affecting 664 individuals. Breached information located on Email.
- MARYLANDHHS OCRas victim2014-06-27
The Union Labor Life Insurance Company (MD) reported to HHS OCR on 2014-06-27 a Theft incident affecting 42,713 individuals. Breached information was located on a Laptop. No business associate was identified as present. No further detail is available from the HHS web description.
- California State AGas victim2014-06-12
The Union Labor Life Insurance Company reported a data breach to the California Attorney General occurring on February 17, 2014. The incident involved the exposure of personally identifiable information (PII) and protected health information (PHI). The specific attack vector, number of affected individuals, and response actions are not detailed in the provided filing summary or attachments.
- New Hampshire State AGas victim2014-06-12
Union Labor Life Insurance Company reported the potential theft of a laptop from its Silver Spring, MD offices on February 17, 2014. The laptop contained backup emails with personal data of 16 New Hampshire residents, including names, addresses, dates of birth, and social security numbers. The company notified the Montgomery County Police and offered 12 months of credit monitoring via AllClear ID. An internal investigation is ongoing.
Supply-chain cascadesreviewed and confirmed
- The Union Labor Life Insurance Company’s filing is one of at least 20 in the INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024).