GLOBE LIFE INC. (GL, GL-PD)
Jun 2024 · Graded Verified · Financial Services · Government record
Incident summary
GLOBE LIFE INC. (GL, GL-PD)Jun 2024
$3.4 million
Spent responding & recovering
Direct expense
Globe Life's agent web portal ran on access permissions and identity checks that could not tell a real user from an impostor, and that portal was the door out. Because the records sat in databases held by its independent agency owners rather than one hardened store, a single portal flaw reached roughly 850,000 people: names, Social Security numbers, health details. The company named the extortion note that followed, never the attacker behind it. When identity is the only lock, a broken check is the whole breach.
Attested: a published report credits an identifiable source for this figure.
SEC 8-K, Item 8.01
Initial attack type exposed or misconfigured system confirmed · Impact data theft confirmed + data extortion
What the company has said it cost
The company’s own disclosed figure, as it changed over time. The loss on the record is this same figure, typed and categorized.
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.