Insurance administrative services provider Landmark Admin has issued a warning regarding a data breach that affects over 800,000 individuals as a result of a cyberattack that occurred in May. Landmark Admin serves as a third-party administrator for various insurance companies, providing essential back-office functions such as processing new business and managing claims for major insurance carriers.
Among the insurance companies collaborating with Landmark Admin are American Monumental Life Insurance Company, Pellerin Life Insurance Company, American Benefit Life Insurance Company, Liberty Bankers Life Insurance Company, Continental Mutual Insurance Company, and Capitol Life Insurance Company.
In a report submitted to the Maine Attorney General’s office, Landmark disclosed that it identified suspicious activity on May 13, 2024, prompting the company to deactivate its IT systems and restrict remote access to its network in an effort to contain the breach.
To address the situation, Landmark enlisted the services of a third-party cybersecurity firm to assist in remediation and to determine whether any data had been compromised during the incident. The investigation revealed that the threat actor had accessed certain files containing personal information of 806,519 individuals.
According to the notification regarding the data breach, the investigation indicated that the following types of information related to potentially affected individuals may have been accessed without authorization: first name or initial and last name; address; Social Security number; tax identification number; driver’s license number or state-issued identification card; passport number; financial account number; medical information; date of birth; health insurance policy number; and details regarding life and annuity policies. It is important to note that the specific information accessed may differ for each individual affected. Those impacted will receive notifications by mail detailing the information that was compromised.
Landmark has stated that the investigation is still in progress and will keep affected individuals informed should additional information arise. Given the sensitive nature of the compromised data, individuals are advised to monitor their credit reports closely.