Globe Life Details

Globe Life

McKinney, Texas • 3700 employees • Insurance

Industry

Insurance

Security Incidents

Globe Life (GL) is an American financial services holding company listed on the New York Stock Exchange which operates through its wholly owned subsidiaries providing life insurance, annuity, and supplemental health insurance products. The company is based in McKinney, Texas.

Security Incidents

Globe Life Breach of Jun 2024

Severity Score

Moderate

Type

Data Breach

Summary

On October 17, 2024, Globe Life, a major insurance provider in the United States, faced an extortion attempt following a data breach that affected over 5,000 individuals. The breach involved customer data from its subsidiary, American Income Life Insurance Company. The stolen data included sensitive information such as full names, email addresses, postal addresses, Social Security Numbers, phone numbers, and health-related data. However, no financial information, like credit card or banking details, was involved.

The breach was initially uncovered earlier in the year, and Globe Life had previ...
Show more

Severity

Recently, Globe Life, a major insurance provider, experienced a data breach that potentially exposed consumer and policyholder information due to vulnerabilities in access permissions and user identity management for a web portal. Although the company swiftly removed external access to the portal upon discovery and claims that its primary operations remain unaffected, the exact nature and extent of the compromised data are still unclear. Given that Globe Life has over 17 million policies, the breach's potential impact is significant, but the immediate operational disruptions have been minimal,...
Show more

Impact

Globe Life, a Texas-based insurance company, experienced a data breach that exposed consumer and policyholder information. The incident stemmed from vulnerabilities related to access permissions and user identity management on one of the company's web portals. In response, Globe Life immediately revoked external access to the affected portal, ensuring that other systems and services remained operational. While the full extent of the compromised data is still under investigation, the company emphasized that it has not experienced a significant operational impact.