The Maine Office of the Attorney General disclosed that American European Insurance Group suffered a data breach on September 18, 2020, caused by an external system breach (hacking). The incident compromised the personal information of 16,414 individuals, though the exact type of exposed data (e.g., financial records, PII, or health details) was not explicitly detailed in the notification. The company delayed public disclosure, issuing breach notifications over a year later on December 6, 2021, while offering affected individuals 12 months of identity theft protection services via IDX as a remedial measure. The breach highlights vulnerabilities in the company’s cybersecurity defenses, exposing customers to potential identity theft, fraud, or misuse of their sensitive information. The lack of immediate transparency may have further exacerbated reputational and operational risks, though no evidence suggests the attack led to direct financial losses, systemic outages, or broader economic consequences beyond the compromised data.
TPRM report: https://www.rankiteo.com/company/american-european-insurance-group-inc-
"id": "ame012091825",
"linkid": "american-european-insurance-group-inc-",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 16414,
'industry': 'Insurance',
'name': 'American European Insurance Group',
'type': 'Insurance Company'}],
'attack_vector': 'External System Breach (Hacking)',
'customer_advisories': '12 months of identity theft protection services '
'through IDX',
'data_breach': {'number_of_records_exposed': 16414,
'personally_identifiable_information': True},
'date_detected': '2020-09-18',
'date_publicly_disclosed': '2021-12-06',
'description': 'The Maine Office of the Attorney General reported that '
'American European Insurance Group experienced a data breach '
'on September 18, 2020, due to an external system breach '
'(hacking), affecting 16,414 individuals. The breach '
'notification was sent on December 6, 2021, offering 12 months '
'of identity theft protection services through IDX.',
'impact': {'data_compromised': True, 'identity_theft_risk': True},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Breach notification with 12 months of '
'identity theft protection services '
'(IDX)'},
'title': 'American European Insurance Group Data Breach (2020)',
'type': 'Data Breach'}