The Union Labor Life Insurance Company reported that on April 1, 2019, an unauthorized external user accessed an employee's Outlook email account via a fraudulent link from a trusted business partner. The incident potentially exposed personal information of participants in medical stop loss or group life insurance policies, including names, addresses, and possibly Social Security numbers. The company disabled the account within 90 minutes, engaged forensic investigators, and offered 24 months of credit monitoring.