Globe Life says that the June breach may impact thousands more

Globe Life has finished investigating the data breach it suffered in June last year. The insurance company stated that the attack may have compromised another 850,000 clients.

This affected entity is one of the major providers of life and health insurance plans in the United States. It has a market valuation of $12 billion and gross revenue of at least $5.3 billion. This massive valuation of the firm could have attracted cyber criminals, potentially compromising numerous individuals.

On June 13, 2024, the corporation uncovered unauthorised access on one of its web portals orchestrated by hackers during a network security check. This event prompted the firm to release initial findings, which indicated that the hack could have only affected 5,000 people.

However, in a new filing, the business disclosed that the threat actor accessed specific databases kept by a few independent agency owners that contained personal information for about 850,000 persons.

Although the affected firm could not determine whether the data obtained by the threat actors extended beyond the almost 5,000 individuals already identified, it opted to be cautious, warn the remaining possibly impacted clients, and provide credit and monitoring services.

 

The information affected during the Globe Life hack gave hackers the necessary tools to execute other malicious activities.

 

According to reports, the potentially exposed data during the Globe Life data breach include full names, email addresses, telephone numbers, postal addresses, date of birth, social security numbers, health-related data, and insurance policy information.

Furthermore, the hacker attempted to extort the company after the incident. On the other hand, the company insisted that it has declined to pay the threat actors’ ransom demand, and the attack has not included data encryption or impacted IT system operations.

The insurance firm claims that it does not expect the security incident to impact its company significantly and that its clients will recover any expenditures, expenses, or losses caused by the breach.