Brighthouse Life Insurance reports data breach caused by third party vendor
Learn More
Brighthouse Life Insurance Company ("Brighthouse") reports a data breach following the exposure of confidential customer information through a third-party data breach at Education Benefit Consultants, LLC, operating as Aviben.
Brighthouse Life Insurance, a subsidiary of Brighthouse Financial, specializes in annuity and life insurance products.
The breach was caused by a sequence of events involving two entities: DXC Technology Company and Aviben. On August 9, 2024, Brighthouse discovered that data had been improperly disclosed by its administrator, DXC Technology, to Aviben. Subsequently, on February 22, 2024, Aviben itself suffered a security incident, resulting in unauthorized access to Brighthouse customers’ information.
The breach occurred between June 28, 2023, and July 3, 2023, and exposed a range of sensitive data:
- Names
- Dates of birth
- Social Security numbers
- Annuity contract numbers
The number of affected individuals is not disclosed.
On October 22, 2024, the company began notifying impacted individuals via data breach letters, detailing the specific data compromised in each case.
