Unum Group

The Washington State Office of the Attorney General reported on January 31, 2022, that Unum Group experienced an unauthorized access data breach impacting approximately 1,610 residents. The breach was identified as occurring between October 28, 2021, and November 15, 2021, when an employee's email account was accessed, potentially exposing personal information including names, Social Security numbers, and dates of birth.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=11427

TPRM report: https://www.rankiteo.com/company/unum

"id": "unu748072625",
"linkid": "unum",
"type": "Breach",
"date": "10/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1610,
                        'industry': 'Insurance',
                        'name': 'Unum Group',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 1610,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Dates of birth']},
 'date_detected': '2022-01-31',
 'date_publicly_disclosed': '2022-01-31',
 'description': "Unauthorized access to an employee's email account "
                'potentially exposing personal information including names, '
                'Social Security numbers, and dates of birth.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Dates of birth']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2022-01-31',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Unum Group Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Account Compromise'}