Delaware Life Insurance Company

Sophisticated ransomware found on information technology infrastructure caused system outages for sure of their Group 1001 Insurance member companies.

Operations were hampered at a number of member organizations, including Clear Spring Life and Annuity, Delaware Life Insurance, Delaware Life Insurance Company of New York, Clear Spring Property and Casualty, and Clear Spring Health.

Group 1001 intentionally disconnected systems to prevent further system damage.

The business intends to improve further to create a more assertive security posture.

Source: https://www.cybersecuritydive.com/news/insurance-holding-1001-restored-ransomware/644330/?&web_view=true

TPRM report: https://scoringcyber.rankiteo.com/company/delaware-life-insurance-company

"id": "del91514323",
"linkid": "delaware-life-insurance-company",
"type": "Ransomware",
"date": "03/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Insurance',
                        'name': 'Clear Spring Life and Annuity',
                        'type': 'Insurance'},
                       {'industry': 'Insurance',
                        'name': 'Delaware Life Insurance',
                        'type': 'Insurance'},
                       {'industry': 'Insurance',
                        'name': 'Delaware Life Insurance Company of New York',
                        'type': 'Insurance'},
                       {'industry': 'Insurance',
                        'name': 'Clear Spring Property and Casualty',
                        'type': 'Insurance'},
                       {'industry': 'Insurance',
                        'name': 'Clear Spring Health',
                        'type': 'Insurance'}],
 'description': 'Sophisticated ransomware found on information technology '
                'infrastructure caused system outages for some of their Group '
                '1001 Insurance member companies. Operations were hampered at '
                'a number of member organizations, including Clear Spring Life '
                'and Annuity, Delaware Life Insurance, Delaware Life Insurance '
                'Company of New York, Clear Spring Property and Casualty, and '
                'Clear Spring Health. Group 1001 intentionally disconnected '
                'systems to prevent further system damage. The business '
                'intends to improve further to create a more assertive '
                'security posture.',
 'impact': {'operational_impact': 'Operations were hampered',
            'systems_affected': ['Clear Spring Life and Annuity',
                                 'Delaware Life Insurance',
                                 'Delaware Life Insurance Company of New York',
                                 'Clear Spring Property and Casualty',
                                 'Clear Spring Health']},
 'lessons_learned': 'The business intends to improve further to create a more '
                    'assertive security posture.',
 'response': {'containment_measures': 'Systems intentionally disconnected'},
 'title': 'Ransomware Attack on Group 1001 Insurance Member Companies',
 'type': 'Ransomware'}