2023 First Financial Security — ransomware attempt; SSNs exposed; $1.2M class settlement (Oct)
Data compromised
Full names and Social Security numbers; may include life-insurance agents and customers who purchased life insurance or annuity products through First Financial Security or affiliates
Technical writeup
Verified insurance-brokerage disclosure — incident October 17, 2023, reported to consumers January 2024. First Financial Security, Inc. said a ransomware attack attempted to access and freeze all information systems but did not succeed in locking systems or disrupting operations; however, a limited amount of system data was viewed. With external IT security experts the company identified exposed data on November 28, 2023, including full names and Social Security numbers for individuals who worked as life insurance agents or purchased life insurance or annuity products from First Financial Security or affiliates. A class action (Price v. First Financial Security, Inc., 2:24-cv-10985) resolved in July 2026 with a $1,200,000 settlement fund offering cash payments and credit monitoring; claims deadline July 20, 2026 per settlement reporting. BreachHistory indexes recordsAffected 0 because the company did not publish a numeric victim count in primary notices.
Root cause
Ransomware attack October 17, 2023 aimed to access and freeze information systems; encryption failed but limited system data was viewed; scope identified November 28, 2023 with external forensics