Ethos

The online system that Ethos Technologies, Inc. uses to write life insurance policies suffered a sophisticated cyber-attack that compromised the names and driver’s license information of as many as 13,300 people.

An unauthorized party got access to its database and accessed the information including the consumer’s name, address, date of birth, and state of issuance.

Ethos notified the impacted consumers of the breach after the investigation.

Source: https://www.jdsupra.com/legalnews/data-breach-alert-ethos-technologies-inc-3197213/

TPRM report: https://scoringcyber.rankiteo.com/company/ethoslife

"id": "eth1856522",
"linkid": "ethoslife",
"type": "Cyber Attack",
"date": "02/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 13300,
                        'industry': 'Life Insurance',
                        'name': 'Ethos Technologies, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Database Access',
 'customer_advisories': 'Notified impacted consumers',
 'data_breach': {'number_of_records_exposed': 13300,
                 'personally_identifiable_information': ['names',
                                                         'driver’s license '
                                                         'information',
                                                         'address',
                                                         'date of birth',
                                                         'state of issuance'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'The online system that Ethos Technologies, Inc. uses to write '
                'life insurance policies suffered a sophisticated cyber-attack '
                'that compromised the names and driver’s license information '
                'of as many as 13,300 people. An unauthorized party got access '
                'to its database and accessed the information including the '
                'consumer’s name, address, date of birth, and state of '
                'issuance. Ethos notified the impacted consumers of the breach '
                'after the investigation.',
 'impact': {'data_compromised': ['names',
                                 'driver’s license information',
                                 'address',
                                 'date of birth',
                                 'state of issuance'],
            'systems_affected': ['Database']},
 'investigation_status': 'Completed',
 'response': {'communication_strategy': 'Notified impacted consumers'},
 'threat_actor': 'Unauthorized Party',
 'title': 'Ethos Technologies Data Breach',
 'type': 'Data Breach'}