On July 27, 2023, the Maine Office of the Attorney General reported a data breach by Clear Spring Life and Annuity Company involving a ransomware attack that occurred on February 9, 2023. Approximately 4,393 individuals were affected, including 10 residents from Maine, with personal information such as names, addresses, Social Security numbers, and policy numbers potentially compromised. Identity theft protection services through IDX were offered for 24 months.
TPRM report: https://www.rankiteo.com/company/clear-spring-life-and-annuity-company
"id": "cle406072825",
"linkid": "clear-spring-life-and-annuity-company",
"type": "Ransomware",
"date": "2/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 4393,
'industry': 'Insurance',
'name': 'Clear Spring Life and Annuity Company',
'type': 'Insurance Company'}],
'attack_vector': 'Ransomware',
'data_breach': {'number_of_records_exposed': 4393,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'Social Security numbers',
'policy numbers']},
'date_detected': '2023-02-09',
'date_publicly_disclosed': '2023-07-27',
'description': 'A ransomware attack on Clear Spring Life and Annuity Company '
'potentially compromised personal information of approximately '
'4,393 individuals.',
'impact': {'data_compromised': ['names',
'addresses',
'Social Security numbers',
'policy numbers'],
'identity_theft_risk': 'High'},
'references': [{'date_accessed': '2023-07-27',
'source': 'Maine Office of the Attorney General'}],
'response': {'third_party_assistance': 'IDX'},
'title': 'Clear Spring Life and Annuity Company Data Breach',
'type': 'Data Breach'}