The insurance administrative services provider, Landmark Admin, announced that it spotted a data breach caused by a May cyberattack. Moreover, the breach could allegedly compromise more than 800,000 individuals.
The affected entity is a third-party administrator for insurance firms. It provides back-office services such as new business processing and claims administration to high-profile insurers.
Some of its notable clients include the Liberty Bankers Life Insurance Company, Continental Mutual Insurance Company, American Monumental Life Insurance Company, Pellerin Life Insurance Company, American Benefit Life Insurance Company, and Capitol Life Insurance Company.
Landmark Admin immediately isolated the affected system to stop the data breach attack from spreading throughout its systems.
The Landmark Admin stated in its filing to the Main Attorney General’s Office that it observed the suspicious behaviour in May 2024. The incident prompted the company to shut down and isolate its IT systems and remote access to its network to prevent the attack from reaching other parts of its systems.
In addition, the company has already contacted a third-party security provider that would help them assess the situation and identify what data was stolen during the attack. However, its investigation revealed that the threat actor had accessed some files that held the personal information of more than 800,000 people.
As of now, the confirmed information related to the data breach includes sensitive data, such as full names, addresses, Social Security numbers, tax identification numbers, driver’s license numbers/state-issued identification cards, and passport numbers.
The data breach has also compromised critical data such as financial account numbers, medical information, birth dates, health insurance policy numbers, and life and annuity policy information.
However, the company noted that the earlier-mentioned data could vary depending on the affected individuals. The Landmark Admin will notify the affected individuals via mail with the information that was impacted.
The company also assured everyone that they would provide more details about the issue as soon as they received new information from the ongoing investigation. Since the stolen data is sensitive, those affected should be more observant of their credit reports and bank accounts for unusual behaviour.
