US insurer Globe Life has completed its investigation into a data breach that took place last June and says the incident may have affected an additional 850,000 customers.
On June 13, 2024, the company discovered that it had been breached by hackers who had gained access to one of its web portals. Globe Life shared the initial results of its investigation in October, highlighting a small-scale breach at its subsidiary, American Income Life Insurance Company. At the time, the breach was said to have affected about 5,000 people.
Globe Life shared the latest results of its data breach investigation in a new filing with the U.S. Securities and Exchange Commission (SEC). According to the filing, attackers gained access to specific databases maintained by independent agency owners containing personal information on approximately 850,000 individuals.
See also: Community Health Center: Data breach affects 1 million patients
Although Globe Life could not confirm whether the stolen information extends beyond the nearly 5,000 people already identified, the company decided to be cautious and notify other customers who may have been affected. It also provides them with credit and monitoring services to protect their identities and accounts.
Potentially exposed information varies per individual and may include:
- Full names
- Email addresses
- Phone numbers
- Postal addresses
- Dates of birth
- Social Security Numbers (SSN)
- Health-related data
- Insurance policy information
Following the data breach, hackers contacted Globe Life with the intention of blackmailing it. However, the company says it refused to pay the ransom. The breach did not involve data encryption, nor did it affect the operation of its IT systems.
See also: NorthBay Health breach affects 569,000 people
Data breaches
As the world becomes increasingly dependent on technology, cybersecurity has become a critical concern for both individuals and businesses. Data breaches, such as the one at Globe Life, can have serious consequences for both customers and companies.
A data breach occurs when sensitive or confidential information is accessed or stolen by an unauthorized person. The consequences of a data breach can vary depending on the severity and extent of the incident. For individuals, it can lead to identity theft, financial fraud, and other forms of cybercrime. For businesses, a data breach can lead to reputational damage, legal ramifications, and significant financial losses.
See also: UK's Smiths Group reveals security breach
To combat the growing threat of cyberattacks and data breaches, companies must prioritize cybersecurity measures. This includes implementing strong security protocols, regularly updating software and systems, conducting thorough risk assessments, and providing comprehensive employee training on cybersecurity best practices.
Additionally, appropriate incident response plans to quickly and effectively mitigate the impact of a data breach, should it occur.
In today's digital landscape, no company is immune to the threat of cyberattacks, as was demonstrated by the data breach of insurance company Globe Life.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Source: www.bleepingcomputer.com
