← First Financial Security, Inc.

2023 First Financial Security — ransomware attempt; SSNs exposed; $1.2M class settlement (Oct)

2023 Unknown records affected Share on X

Data compromised

Full names and Social Security numbers; may include life-insurance agents and customers who purchased life insurance or annuity products through First Financial Security or affiliates

Technical writeup

Verified insurance-brokerage disclosure — incident October 17, 2023, reported to consumers January 2024. First Financial Security, Inc. said a ransomware attack attempted to access and freeze all information systems but did not succeed in locking systems or disrupting operations; however, a limited amount of system data was viewed. With external IT security experts the company identified exposed data on November 28, 2023, including full names and Social Security numbers for individuals who worked as life insurance agents or purchased life insurance or annuity products from First Financial Security or affiliates. A class action (Price v. First Financial Security, Inc., 2:24-cv-10985) resolved in July 2026 with a $1,200,000 settlement fund offering cash payments and credit monitoring; claims deadline July 20, 2026 per settlement reporting. BreachHistory indexes recordsAffected 0 because the company did not publish a numeric victim count in primary notices.

Root cause

Ransomware attack October 17, 2023 aimed to access and freeze information systems; encryption failed but limited system data was viewed; scope identified November 28, 2023 with external forensics

References