Posted On October 24, 2023 Consumer Privacy & Data Breaches
October 24 – The New York Life Insurance Company data breach lawyers at Console & Associates, P.C are investigating the data breach that was reported by Andesa Services (“Andesa”) after the company was targeted in a recent cyber security attack. The data breach resulted in the names and Social Security numbers of certain New York Life policyholders being compromised. It is believed to have impacted as many as 30,167 individuals.
According to the Attorney General of Maine, Andesa Services reported a data breach after they were targeted in a recent cyber security attack. Andesa performs administrative services for employer-owned or sponsored New York Life insurance policies and uses the MOVEit secure file-transfer application. On May 31, 2023, Progress Software, the creator of MOVEit, announced a critical vulnerability within the program. Andesa applied all available patches and took the necessary steps to mitigate any potential unauthorized access. The company also launched an investigation and 
confirmed that an unauthorized actor was able to access its MOVEit server between May 30, 2023 and May 31, 2023, as well as the sensitive data stored on the server. On October 23, 2023, Andesa Services sent out data breach letters on behalf of New York Life Insurance Company to those individuals whose information was affected by the breach.
Andesa Services is a business services company that caters to the insurance industry by providing policy lifecycle solutions for the life insurance and annuities industry, relying on cloud-based systems for transaction management and recordkeeping. Andesa Services also provides product and actuarial support services.
Our data breach lawyers are eager to speak to victims of the Andesa Services data breach to determine what damages they sustained and what compensation may be available to them. If you recently received a NOTICE OF DATA BREACH from Andesa Services and would like a free consultation, contact the Console & Associates, P.C. law firm at (866) 778-5500 to discuss your legal options, or submit a confidential contact form.
Consider reading our Guide for Victims of a Data Breach to learn what your next steps should be.
