Pan-American Life Insurance Group

The California Attorney General reported a data breach involving Pan-American Life Insurance Group on March 11, 2021. The breach occurred on February 19, 2021, due to unauthorized access resulting from a phishing attempt that installed malware. Personal information, including names, addresses, and dates of birth, was compromised, affecting a small percentage of individuals with more sensitive data involved.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-539040

TPRM report: https://www.rankiteo.com/company/pan-american-life-insurance-group

"id": "pan400080525",
"linkid": "pan-american-life-insurance-group",
"type": "Breach",
"date": "2/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'A small percentage of '
                                              'individuals',
                        'industry': 'Insurance',
                        'name': 'Pan-American Life Insurance Group',
                        'type': 'Insurance Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Dates of Birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2021-02-19',
 'date_publicly_disclosed': '2021-03-11',
 'description': 'The California Attorney General reported a data breach '
                'involving Pan-American Life Insurance Group on March 11, '
                '2021. The breach occurred on February 19, 2021, due to '
                'unauthorized access resulting from a phishing attempt that '
                'installed malware. Personal information, including names, '
                'addresses, and dates of birth, was compromised, affecting a '
                'small percentage of individuals with more sensitive data '
                'involved.',
 'impact': {'data_compromised': ['Names', 'Addresses', 'Dates of Birth']},
 'initial_access_broker': {'entry_point': 'Phishing email'},
 'post_incident_analysis': {'root_causes': 'Phishing attempt leading to '
                                           'malware installation'},
 'references': [{'date_accessed': '2021-03-11',
                 'source': 'California Attorney General'}],
 'title': 'Data Breach at Pan-American Life Insurance Group',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Malware installation via phishing'}