Group 1001

Sophisticated ransomware found on information technology infrastructure caused system outages for certain of their Group 1001 Insurance member companies.

Operations were hampered at a number of member organisations, including Clear Spring Life and Annuity, Delaware Life Insurance, Delaware Life Insurance Company of New York, Clear Spring Property and Casualty, and Clear Spring Health.

Group 1001 intentionally disconnected systems to prevent further system damage.

The business intends to make further improvements to create a stronger security posture.

Source: https://www.cybersecuritydive.com/news/insurance-holding-1001-restored-ransomware/644330/?&web_view=true

TPRM report: https://scoringcyber.rankiteo.com/company/group1001

"id": "gro232412323",
"linkid": "group1001",
"type": "Ransomware",
"date": "03/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Insurance',
                        'name': 'Group 1001 Insurance',
                        'type': 'Insurance Company'},
                       {'industry': 'Insurance',
                        'name': 'Clear Spring Life and Annuity',
                        'type': 'Insurance Company'},
                       {'industry': 'Insurance',
                        'name': 'Delaware Life Insurance',
                        'type': 'Insurance Company'},
                       {'industry': 'Insurance',
                        'name': 'Delaware Life Insurance Company of New York',
                        'type': 'Insurance Company'},
                       {'industry': 'Insurance',
                        'name': 'Clear Spring Property and Casualty',
                        'type': 'Insurance Company'},
                       {'industry': 'Insurance',
                        'name': 'Clear Spring Health',
                        'type': 'Insurance Company'}],
 'description': 'Sophisticated ransomware found on information technology '
                'infrastructure caused system outages for certain of their '
                'Group 1001 Insurance member companies.',
 'impact': {'downtime': 'Operations were hampered',
            'operational_impact': 'Operations were hampered',
            'systems_affected': 'System outages for member companies'},
 'lessons_learned': 'The business intends to make further improvements to '
                    'create a stronger security posture.',
 'response': {'containment_measures': 'Group 1001 intentionally disconnected '
                                      'systems to prevent further system '
                                      'damage'},
 'title': 'Ransomware Attack on Group 1001 Insurance',
 'type': 'Ransomware'}