Symetra reports data breach
Learn More
Symetra Life Insurance Co reports unauthorized access to their customer portal, caused by credential stuffing, where unauthorized third parties used personally identifiable information obtained from outside of Symetra to log into customer accounts.
The company launched an investigation after detecting the unusual activity, engaged third-party forensics firms to assist. The breach occurred over an extended period, spanning from April 12 to September 10, 2024. Symetra claims that their internal systems were not breached during this incident.
Exposed data types includes:
- Customer names
- Mailing addresses
- Email addresses
- Dates of birth
- Account numbers
- Beneficiary details
The breach affected 36 customer accounts total, with 4 of these accounts belonging to Massachusetts residents. The company has notified impacted customers and offers affected customers two years of free credit monitoring and identity theft protection.
