IMA Financial Group (IMA) announced on April 19th it had experienced a data breach resulting in confidential consumer data leakage.
The insurance and wealth management solutions company filed a notice of the data security incident with the Attorney General of Texas. Additionally, it sent out letters to all the clients whose information was compromised.
What Is at Risk?
Threat actors succeeded to gain unauthorized access to and exfiltrate consumers` personal data:
- Names and dates of birth,
- Social Security numbers,
- Driver’s license information,
- Insurance claims-related information,
- Passport numbers,
- Credit card data,
- Medical records and insurance.
Consequently, hackers can now leverage the stolen data in phishing campaigns, online impersonation, and identity theft. According to Cybernews, 941 were impacted by the data breach.
IMA Financial offered the affected customers the possibility to benefit from a series of security measures, like enrolling in complimentary credit monitoring and identity protection services.
More About the IMA Data Breach
In October 2022, IMA detected “unusual activity within its computer network”. At that moment, the team became aware that a malicious actor had accessed folders containing sensitive files. Further on, IMA took the necessary measures to secure its network. It also opened an investigation, in collaboration with cybersecurity specialists. The company finished the affected files review process in March 2023.
Upon discovering that sensitive consumer data was made available to an unauthorized party, IMA Financial Group began to review the affected files to determine what information was compromised and which consumers were impacted. IMA completed this process on March 10, 2023.
The company announced the impacted customers about the data breach and the mitigation measures it took on April 19th, 2023.
IMA Financial Group is a financial services company based in Wichita, with 1,800 employees and an approximately $1.5 billion annual revenue.
If you liked this article, follow us on LinkedIn, Twitter, Facebook, and Youtube for more cybersecurity news and topics.