Malware
Hackers Threaten Globe Life with Devastating Blackmail after Swiping Sensitive Customer Data
Hackers have stolen customer data from Globe Life and are now demanding a ransom. Globe Life is working with cybersecurity firm CrowdStrike to investigate the attack, prevent further data loss, and notify affected clients. Learn more about the breach and how Globe Life is responding to this cyber threat.
Insurance Giant Targeted for Extortion
We recently learned that insurance behemoth Globe Life revealed that an unknown cybercriminal tried to extort money from the company. The attacker threatened to release data stolen from Globe Life’s systems earlier this year if the company didn’t pay up.
Established in 1900, Globe Life is one of the largest life and health insurance providers in the United States. It boasts a market capitalization of $12 billion and has a total revenue exceeding $5.3 billion.
Details of the Data Breach
Globe Life first disclosed the data breach on June 13 when the company found out about the compromise while examining potential vulnerabilities related to access permissions and user identity management for its web portal.
At that time, Globe Life warned that the hackers might have accessed consumer and policyholder data following a successful breach of one of the web portals. There was considerable concern about what data could have been stolen, as such a breach could potentially impact millions of people.
Extent of the Damage
According to a recent filing submitted to the SEC, Globe Life revealed that at least 5,000 customers of its subsidiary, American Income Life Insurance Company, are affected by the breach. However, this number may increase as the investigation progresses.
Globe Life also stated that the cybercriminals behind the attack tried to extort the company into paying a ransom in exchange for not publishing the stolen data.
The data samples Globe Life received from the threat actor appear to be related to one of its subsidiaries, American Income Life Insurance Company.
As stated in the SEC filing, “Globe Life Inc. recently received communications from an unknown threat actor seeking to extort money from the Company in exchange for not disclosing certain information held and used by the Company and its independent agents.”
The ongoing investigation has revealed that the stolen information includes a variety of data types such as full names, email addresses, phone numbers, postal addresses, Social Security Numbers, health-related data, and policy information. The specific data compromised varies for each individual.
No Ransomware Involved
Globe Life clarified that the extortion attempt does not involve ransomware, meaning there has been no data encryption or file locks on the company’s systems.
Financial Impact on Globe Life
As of now, Globe Life believes that the incident will not have a significant impact on its business operations, and it doesn’t expect the breach to affect its financial performance.
A Call to Stay Informed and Vigilant
This recent data breach underscores the importance of staying informed and vigilant in the world of cybersecurity. We encourage you to keep coming back to learn more about the latest threats and best practices for protecting your data and privacy. Feel free to contact us anytime for more information and guidance on how to keep your data secure.