- Security researchers find new ads for the sale of a stolen database
- The database belongs to the American National Insurance Company, and was first stolen in 2023
- It contains information that belongs to thousands of customers and employees.
The confidential information that belongs to thousands of customers and employees of the American National Insurance Company is sold online after being initially stolen years ago, according to experts.
American National Insurance Company (Anico) is an organization of financial services that provides a wide range of financial and insurance products, including life insurance, health insurance, property and victims insurance, annuities and services of pension plans.
In 2023, the company suffered a cyber attack and lost confidential data of customers and employees. Now, almost two years later, stolen information seems to be arising.
A lot of confidential information
The team in Security detectives I discovered the announcement of the sale in a piracy forum, noting that the seller was offering a 90 MB CSV file, which, judging by a shared screen capture, seems to have been published in Breachforums, one of the most piracy communities popular that exist.
The seller states that the file contains 279,332 confidential data lines and employees. They also shared a small sample to prove their statements.
The data contain customer account identification numbers, state, email addresses, full names, birth dates, age, marital sex, generation, occupation, telephone numbers, language, postal address, amount of information premium , Annuality of Premium quantity of information and type of policy type.
Employees have also lost information about their years in force, names of agents, emails of agents, MLGA/RGA names and emails MLGA/RGA.
“This report issued by data violation lawyers in Console & Associate .
“However, our cybersecurity team cannot verify if the data shared in this publication publication includes such confidential information or are linked to the informed violation, since the author does not specify the exact source of the data beyond mention on the dark website “.
