New York Life Insurance Company
Incident posture
Linked entities
- Victim
- New York Life Insurance Company
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
New York Life Insurance Co. discovered unauthorized access to one of its agents' email accounts and, after securing the account and conducting an investigation, confirmed that the compromised account contained clients' personal information, including names, addresses, Social Security numbers, driver's license numbers, financial data, medical and health insurance information, and dates of birth. Individuals who received a breach notification may face an increased risk of identity theft and fraud, prompting a national class action law firm to investigate potential legal claims on their behalf.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
New York Life Insurance Co. learned of a security incident on or about December 2, 2025, when it discovered unauthorized access to one of its agents' email accounts. The company secured the compromised account and subsequently conducted a detailed investigation into the breach. On April 8, 2026, New York Life Insurance Co. confirmed that the accessed email account contained personal information belonging to some of its clients. The exposed data included names, addresses, Social Security numbers, driver's license numbers, financial information such as account or credit/debit card numbers, medical information, health insurance information, and dates of birth.
Individuals who received a data breach notification from New York Life Insurance Co. were identified as potentially facing an increased risk of identity theft and fraud due to the exposed information. In response to the incident, Edelson Lechtzin LLP launched an investigation into the exposure of personal information stemming from the breach. The law firm's investigation aims to assess potential legal claims on behalf of affected individuals. No further details about the investigation's findings were provided in the source.
New York Life Insurance Co. is a major United States life insurer headquartered in New York City and owned by its policyholders, offering products such as life insurance, retirement planning, investments, and long-term care services. Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California, handling matters that include data breach litigation, securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud. The firm's involvement in the New York Life incident reflects its practice of pursuing data privacy claims on behalf of individuals whose personal data may have been compromised.
Sources
Sources available to members: 1 source.