Oregon State AG
Clustered 8 filings across 5 jurisdictions · filing window Jul 27, 2023 → Nov 21, 2023. View entity profile → Other incidents for this victim →
incident inc_83f7d4f413ee43b1 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Financial account
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA ME OR VT WA
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
8 filings across 5 jurisdictions · Jul 27, 2023 – Nov 21, 2023 · 2 milestones
Feb 9, 2023
When the intrusion reportedly occurred, per the linked filings
Feb 9, 2023
Reported by MAINE AG, CALIFORNIA AG, WASHINGTON AG, OREGON AG, VERMONT AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Clear Spring Life and Annuity Company reported a ransomware incident that was discovered on February 9, 2023. The breach, which also occurred on the same day, affected 10 Maine residents. The compromised information includes financial account numbers or credit/debit card numbers in combination with security codes, access codes, passwords, or PINs. The company offered 24 months of identity theft protection services through IDX.
Affected (this filing): 10
Clear Spring Life and Annuity Company notified Vermont AG of a ransomware incident discovered on Feb 9, 2023. An unauthorized actor accessed files containing names, SSNs, DOBs, and policy numbers. The company engaged forensic investigators, notified the FBI, and is offering 24 months of identity theft protection services to affected individuals.
Clear Spring Life and Annuity Company, a finance sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-02-09 and filed notice on 2023-07-28. 1,125 Washington residents were affected. 169 days elapsed between awareness and notification. 71 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 1,125
Clear Spring Life and Annuity Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-28. The breach was discovered on 2/9/2023. 63,045 individuals were affected. Notice was sent on 7/28/2023.
Affected (this filing): 63,045
Clear Spring Life and Annuity Company experienced a ransomware incident. On February 9, 2023, the company detected sophisticated ransomware on its IT infrastructure. An unauthorized actor accessed and acquired files containing personal information, including names, addresses, dates of birth, and Social Security numbers of producers and policy/contract holders. The breach occurred on November 30, 2022. The company engaged forensic experts, notified the FBI and regulators, and is offering 24 months of identity protection services to affected individuals.
Clear Spring Life and Annuity Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-11-21. The breach occurred during 11/30/2022 - 2/9/2023. The breach was discovered on 1/1/0001. 64,786 individuals were affected. Notice was sent on 7/28/202311/21/2023.
Affected (this filing): 64,786
Clear Spring Life and Annuity Insurance Company experienced a ransomware attack. The California OAG form lists the breach date as November 30, 2022. The company discovered sophisticated ransomware on February 9, 2023. An unauthorized actor accessed and acquired files containing names, addresses, dates of birth, and Social Security numbers of policyholders and agents. The company engaged forensic investigators, notified the FBI, and is offering 24 months of identity protection services.
Clear Spring Life and Annuity Company experienced a ransomware attack. The company was alerted to sophisticated ransomware on February 9, 2023. An unauthorized actor accessed and acquired files containing personal information including names, addresses, dates of birth, and Social Security numbers. The breach date listed by the CA AG is November 30, 2022. The company engaged forensic experts, notified the FBI, and is offering 24 months of identity protection services.