- US income life reportedly lost sensitive data about 150,000 people in a cyber attack
- Hackers published stolen insurance registers online, including names, contacts and political details
- Free Data Enry can trigger widespread identity theft, phishing and insurance fraud
The American Insurance Company American Income Life (AIL) has apparently suffered a data violation where the lost sensitive data of approx. 150,000 people.
Earlier this week, a threat actor released a new thread on a popular hacking forum that claimed to have violated the company’s web site and stolen, including unique post -IDs, names, phone numbers, addresses, e -mail addresses, birth dates, gender and various information about people’s insurance, such as policy status or insurance board names.
The thread was discovered by cyber security scientists from Cygenerws There, after analyzing a sample, the data – mostly – said – checks – even if it is old and outdated could not be determined.
Abuses the stolen information
It seems that the striker offers the data for free. Normally, hackers would sell it to his friends, who would later use it to launch their own attacks. Sharing it without compensation can significantly increase the number of follow -up attacks.
There are several ways in which the stolen data can be utilized. Personally identifiable information such as names, birth dates, addresses and contact information can be used for identity theft, allowing criminals to open false accounts or apply for loans in the victims’ names.
Insurance-related data, including policy status and plan names, may enable targeted phishing attacks where scammers emulate the company to trick customers into revealing more sensitive information or making unauthorized payments.
With enough details, attackers could also participate in medical or insurance fraud by submitting false claims or accessing healthcare under someone else’s name.
Finally, if record -IDs and structured data were exposed, this also increases the risk of automated utilization, especially if the stolen files can be combined with other data sets.
We have reached the US income life and will update this article if we hear back.
