The Maine Office of the Attorney General reported a data breach involving Fidelity Investments Life Insurance & Empire Fidelity Investments Life Insurance on March 18, 2024. The breach occurred between October 29, 2023, and November 2, 2023, due to a third-party software vulnerability at vendor Infosys McCamish Systems LLC, affecting 29,073 individuals, including 170 residents. Social Security Numbers were among the compromised information.
TPRM report: https://www.rankiteo.com/company/fidelity-investments
"id": "fid150072625",
"linkid": "fidelity-investments",
"type": "Vulnerability",
"date": "10/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 29073,
'industry': 'Financial Services',
'name': 'Fidelity Investments Life Insurance & Empire '
'Fidelity Investments Life Insurance',
'type': 'Insurance Company'}],
'attack_vector': 'Third-party software vulnerability',
'data_breach': {'number_of_records_exposed': 29073,
'personally_identifiable_information': 'Social Security '
'Numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Social Security Numbers'},
'date_detected': '2024-03-18',
'date_publicly_disclosed': '2024-03-18',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Fidelity Investments Life Insurance & Empire '
'Fidelity Investments Life Insurance on March 18, 2024. The '
'breach occurred between October 29, 2023, and November 2, '
'2023, due to a third-party software vulnerability at vendor '
'Infosys McCamish Systems LLC, affecting 29,073 individuals, '
'including 170 residents. Social Security Numbers were among '
'the compromised information.',
'impact': {'data_compromised': ['Social Security Numbers']},
'references': [{'date_accessed': '2024-03-18',
'source': 'Maine Office of the Attorney General'}],
'title': 'Data Breach at Fidelity Investments Life Insurance & Empire '
'Fidelity Investments Life Insurance',
'type': 'Data Breach',
'vulnerability_exploited': 'Software vulnerability at vendor Infosys McCamish '
'Systems LLC'}