- Security researchers find new ad for the sale of a stolen database
- The database belongs to the US national insurance company and was first stolen in 2023
- It contains information belonging to thousands of customers and employees
Sensitive information belonging to thousands of customers and employees of the US national insurance company is sold online after they were originally stolen years ago, experts have claimed.
The American National Insurance Company (Anico) is an organization for financial services that provide a wide range of insurance and financial products, including life insurance, health insurance, property and accident insurance, annuity and pension plan.
In 2023, the company suffered a cyberattack and lost sensitive customer and employee data. Now, almost two years later, it seems that the stolen information is emerging.
Lots of sensitive information
The team on Safetydetectives Discovered the advertisement for the sale on a hacking forum, noting that the seller is offering a 90MB CSV file, which after a shared screen appears to have been broadcast on Breach Forums, one of the most popular hacking communities out there.
The seller claims that the file contains 279,332 lines with sensitive customer and employee data. They also shared a small sample to prove their claims.
Data policy.
Employees have also lost information about their years in effect, agent names, agent -e -emails, mlga/rga names and mlga/rga -e emails.
“This report issued by data violation attorneys at Console & Associates, PC, who examines the 2023 data violation, claims that information on personal security, financial account information and medical information were also postponed,” the researchers said.
“However, our cyber security team cannot verify whether the data shared in this forum post includes then sensitive information or is linked to the reported violation as the author does not specify the exact source of the data besides mentioning its presence on the dark web. “
