cyber
confidence high
sentiment negative
materiality 0.60
Globe Life updates cyber incident; notifying ~850k additional individuals despite no confirmed data acquisition
GLOBE LIFE INC.
- Threat actor obtained PII of ~5,000 individuals (names, SSNs, health data, etc.); no financial data.
- Company did not pay extortion; notified federal law enforcement.
- Data traced to databases maintained by small number of independent agency owners.
- Voluntarily notifying ~850,000 additional individuals whose data was in same databases, as precaution.
- No ransomware used; no business interruption; company believes incident not material.