Globe Life data breach affects 850,000 more customers

Globe Life, a leading provider of life and health insurance in the United States, has concluded its investigation into a data breach discovered last June and now reports that the incident may have affected an additional 850,000 individuals. The company disclosed these findings in a recent filing with the U.S. Securities and Exchange Commission (SEC), significantly expanding the initial estimate of affected customers.

 

The security breach was first identified on June 13, 2024, during a routine review of the company’s networks. The investigation, conducted with the assistance of external cybersecurity experts, initially pointed to a limited-scale compromise at American Income Life Insurance Company, a subsidiary of Globe Life. The company estimated that approximately 5,000 individuals had been affected at the time. However, further analysis revealed that the threat actor had accessed databases maintained by a few independent agency owners, potentially exposing a far greater number of customers.

 

Although Globe Life has not confirmed whether the stolen information extends beyond the 5,000 individuals previously identified, it has decided to act cautiously by notifying the additional 850,000 potentially affected customers. The company also offers those impacted with complimentary credit monitoring and identity protection services.

 

The compromised data varies among individuals and may include full names, email addresses, phone numbers, postal addresses, dates of birth, Social Security numbers (SSNs), health-related information, and insurance policy details. Despite the severity of the breach, Globe Life has stated that the incident did not involve data encryption or disrupt its IT infrastructure.

 

Following the breach, the hacker attempted to extort the company, demanding a ransom payment. However, Globe Life declined to comply with the demand. The insurer maintains that the security incident is not expected to have a material financial impact on its business, as costs associated with the breach, including potential losses and expenses, will be covered by its insurers.

 

With a market capitalization of $12 billion and annual revenues exceeding $5.3 billion, Globe Life is one of the most prominent insurance providers in the U.S. The company continues to bolster its cybersecurity measures in response to the breach, reinforcing its commitment to protecting customer data and maintaining trust in its services.