State Farm Insurance Companies

On July 28, 2012, State Farm Insurance Companies suffered a data breach caused by an employee misusing sensitive customer information. The compromised data included personally identifiable details such as names, addresses, birthdates, credit card numbers, and Social Security numbers. The exact number of affected individuals remains undetermined, but the breach posed significant risks, including potential identity theft, financial fraud, and reputational harm. The incident was formally reported to the California Office of the Attorney General on August 23, 2012. The misuse of such critical data by an internal actor highlights vulnerabilities in employee access controls and oversight, raising concerns about the company’s ability to safeguard customer trust and comply with data protection regulations.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-32666

TPRM report: https://www.rankiteo.com/company/state_farm

"id": "sta1007091725",
"linkid": "state_farm",
"type": "Breach",
"date": "7/2012",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Undetermined',
                        'industry': 'Insurance',
                        'location': 'United States (California)',
                        'name': 'State Farm Insurance Companies',
                        'type': 'Insurance Provider'}],
 'attack_vector': 'Insider Misuse',
 'data_breach': {'number_of_records_exposed': 'Undetermined',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Payment Information']},
 'date_detected': '2012-07-28',
 'date_publicly_disclosed': '2012-08-23',
 'description': 'The California Office of the Attorney General reported that '
                'State Farm Insurance Companies experienced a data breach on '
                'July 28, 2012. The breach involved an employee misusing '
                'customer information, including names, addresses, birthdates, '
                'credit card numbers, and social security numbers, affecting '
                'an undetermined number of individuals.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Birthdates',
                                 'Credit Card Numbers',
                                 'Social Security Numbers'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': True},
 'response': {'law_enforcement_notified': True},
 'threat_actor': 'Employee (Insider)',
 'title': 'State Farm Insurance Companies Data Breach (2012)',
 'type': 'Data Breach (Insider Threat)'}