New York Life Insurance Company
| Primary URL | Location | Industry | www[.]nyl[.]com |
Country
United States of America
|
Financial Services
|
|---|
Profile
New York Life Insurance Company operates within the insurance sector, headquartered in the United States of America. While specific details regarding its core products, market scope, or operational scale are not provided within the available source material, the company functions as an insurance provider. Its activities necessitate the collection and safeguarding of sensitive personal information belonging to its policyholders and customers, placing significant importance on data security practices within its operations. The nature of the business inherently involves managing substantial volumes of confidential client data across various administrative and customer service functions.
The organisation experienced a significant cybersecurity incident involving external hacking on May 30, 2023. This breach resulted in the unauthorized access and compromise of sensitive personal information, specifically names and Social Security Numbers, belonging to 30,167 individuals. Among those affected were 38 residents of the state of Maine. The breach period concluded immediately prior to its discovery by the company. Upon identifying the incident, New York Life Insurance Company initiated a response protocol that included issuing written notifications to all impacted consumers informing them of the compromise of their personal data. As part of its remediation efforts, the company offered affected individuals complimentary access to Experian IdentityWorks credit monitoring, fraud detection services, identity restoration support, and associated insurance coverage for a duration of twelve months. This incident was noted as occurring amidst a pattern of prior breach notifications issued by the company within the preceding year, indicating a recurring challenge in protecting customer information. The company's response highlights the critical role of incident management and consumer protection measures following a data security failure.
