Delaware Life Insurance Company reports data breach after ransomware attack

Delaware Life Insurance Company, (Delaware Life), reported a ransomware attack which came to the company's attention on February 9, 2023.

Following the discovery of the ransomware attack, Delaware Life informed law enforcement authorities, segregated the compromised segments of their network, and engaged experts in cybersecurity to conduct an investigation into the breach. This forensic analysis confirmed that the cyber intruder had indeed accessed and obtained certain files containing private consumer information.

The attack allowed unauthorized access to their digital systems and led to the potential exposure of personal customer data, which encompassed:

• names,
• residential addresses,
• birth dates,
• Social Security numbers.

Several months into the investigation, by June 2023, Delaware Life had identified a portion of the impacted consumers. Nevertheless, as the inquiry progressed, it became clear that additional individuals had been affected by the data breach.

Delaware Life did not disclose the number of affected individuals.

On November 21, 2023, the company took the step of sending out detailed data breach notification letters to all the identified victims of the incident.