Data leak
Globe Life Insurance Data Breach (Extortion via Independent Agencies)
Primary Source βIncident Details
Globe Life Inc. (insurance holding company, parent of American Income Life Insurance) detected suspicious activity on June 13, 2024. A threat actor obtained customer PII and attempted to extort Globe Life, demanding ransom payment in exchange for not publishing data. Globe Life filed an SEC 8-K on October 17, 2024 disclosing initial scope of ~5,000 affected individuals. A January 2025 updated SEC filing expanded the scope to approximately 850,000 additional individuals after investigators found the hackers had accessed databases maintained by several independent agency owners. Globe Life was not able to confirm whether all 850,000 additional records were actually exfiltrated. Exposed data included names, email addresses, phone numbers, postal addresses, DOB, SSNs, health-related data, and insurance policy information. Globe Life settled class action for $4.66 million. Insurance sector; illustrates risks of independent agent data handling.
Technical Details
- Initial Attack Vector
- Unauthorized access to databases maintained by a small number of independent insurance agency owners affiliated with Globe Life
Timeline
- 2024-06-13 Breach occurred
- 2024-10-17 Publicly disclosed
- 2025-02-01 Customers notified