Security Life of Denver Insurance Company

The Maine Office of the Attorney General disclosed a data breach affecting Security Life of Denver Insurance Company, which occurred on March 9, 2023, but was reported on July 1, 2024. The incident stemmed from an inadvertent disclosure of personal information, compromising the data of 621 individuals. While the exact nature of the exposed data was not detailed, the breach prompted the company to offer 24 months of identity theft protection services to the affected parties. The delay in reporting (over a year) raises concerns about transparency and response protocols. The breach did not involve malicious cyberattacks like ransomware or hacking but rather an internal oversight, leading to unauthorized exposure of sensitive personal details. Such incidents underscore the risks of human error in data handling, even within regulated industries like insurance, where customer trust and data integrity are critical.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b5d3e1b5-21b6-4020-8f71-0cb87856a7de.html

TPRM report: https://www.rankiteo.com/company/silacins

"id": "sil244082125",
"linkid": "silacins",
"type": "Breach",
"date": "3/2023",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 621,
                        'industry': 'Insurance',
                        'location': 'Denver, Colorado, USA',
                        'name': 'Security Life of Denver Insurance Company',
                        'type': 'Insurance Company'}],
 'customer_advisories': 'Identity theft protection services for 24 months '
                        'offered to affected individuals',
 'data_breach': {'number_of_records_exposed': 621,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information)',
                 'type_of_data_compromised': 'Personal Information'},
 'date_publicly_disclosed': '2024-07-01',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Security Life of Denver Insurance Company on '
                'July 1, 2024. The breach occurred on March 9, 2023, due to '
                'inadvertent disclosure of personal information, affecting a '
                'total of 621 individuals. Identity theft protection services '
                'for 24 months were offered to those impacted.',
 'impact': {'data_compromised': 'Personal Information',
            'identity_theft_risk': 'High (Identity theft protection services '
                                   'offered for 24 months)'},
 'post_incident_analysis': {'root_causes': 'Inadvertent disclosure of personal '
                                           'information'},
 'references': [{'date_accessed': '2024-07-01',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'remediation_measures': 'Offered identity theft protection '
                                      'services for 24 months to affected '
                                      'individuals'},
 'title': 'Data Breach at Security Life of Denver Insurance Company',
 'type': 'Data Breach'}