Globe Life Extortion Breach: What Small Businesses Should Take Away
Last updated:
Globe Life, a life and health insurer, reported that it was being extorted by an attacker who had stolen customer data from a subsidiary, American Income Life. The company said the data included personal information such as names, addresses and in some cases Social Security numbers, plus health and policy details, and that about 5,000 people had been identified so far with the number possibly higher. It said financial details such as card or bank numbers were not accessed. The investigation was ongoing when it was reported.
Why extortion changes the problem
In this type of incident the attacker threatens to publish or sell stolen data. That means backups alone do not solve it, because the data has already left the building. Prevention and early detection become even more important.
What organizations can do
- Limit the data you hold and delete what you no longer need.
- Restrict access so staff and systems only reach what their role requires.
- Use MFA and monitoring to make theft harder and quicker to spot.
- Plan communications for customers and regulators in advance.
If your information is in a breach
Review credit reports and account statements, change passwords for related accounts, and be careful with unexpected calls or emails that mention the incident.
Related reading
- managed cybersecurity for Portland businesses
- How managed IT helps reduce data breach risk
- Ransomware, double extortion and resilience
Talk to a local team
PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.
Request an IT assessment
Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.
About the author: Steve Shaff
Steve Shaff is the owner of PDX Information Technology Services, a managed IT provider he founded in 2020. From the Tualatin office he helps businesses across Portland Metro & Southwest Washington with IT support, cybersecurity and compliance. More about Steve ยท Contact PDX IT
Portland small business mobile security checklist: lock phones, avoid risky public Wi-Fi, secure office wireless, spot text scams and handle lost phones.
Portland employee offboarding IT checklist: lock Microsoft 365, save the mailbox and OneDrive files, change shared passwords and wipe company devices.
Holiday phishing scams are hitting Portland small businesses: fake shipping notices, gift card requests from the boss and delivery texts. How to stop them.