Ethos Technologies Inc

Ethos Technologies Inc. reported a data breach affecting 13 Maine residents. The breach occurred between July 15, 2021, and January 12, 2022, and was discovered on January 12, 2022. Unauthorized actors launched a sophisticated attack against the company's online insurance application flow. Using information obtained from other sources (name, address, date of birth, and driver's license state), the actors utilized specialized web tools to access corresponding driver's license numbers from the page source code. The company offered 24 months of identity theft and credit monitoring services to affected individuals.

Affected (this filing): 13

Ethos Technologies Inc., an online life insurance provider, discovered on January 12, 2022 that unauthorized actors had exploited a feature in its online insurance application flow to access driver's license numbers. Attackers used pre-obtained personal information (name, DOB, address, license state) to trigger a third-party validation service, then extracted license numbers from website page source code. The unauthorized activity spanned approximately July 15, 2021 through January 12, 2022. Ethos notified federal law enforcement, made technical changes, and engaged a forensic firm.