Oxford Life Insurance Company Data Breach Lawsuit

On May 13, 2025, Oxford Life Insurance Company (Oxford) began notifying 30 Maine residents whose personal data may have been compromised in a recent data breach. The breach was discovered after a social engineering attack gained unauthorized access to Oxford’s IT network on February 20, 2025.

Oxford Life Insurance Company Data Breach Details

Oxford Life Insurance was alerted to suspicious activity on its IT network after a user reported the incident. In response, the company immediately took steps to contain the activity and launched an investigation with the assistance of a third-party forensic firm. The investigation revealed that an unauthorized individual accessed the network for approximately one hour, during which some of Oxford’s files were copied. The breach did not involve ransomware, and the company’s systems were not encrypted.

The attack was traced to a social engineering scam where the attacker impersonated a collections company, gaining access to an employee’s computer and ultimately allowing unauthorized access to Oxford’s network.

How to Know if You Are Affected

Oxford is sending out notifications to the 30 affected individuals, letting them know that their information may have been compromised. If you have received a notification letter from Oxford, you are likely among those impacted by this data breach.

However, it’s important to note that identity theft or misuse of your personal information could occur before you receive a formal notification. In some cases, it may take several weeks for companies to identify and contact all affected individuals. If you suspect your information may have been compromised, especially if you are a policyholder, claimant, or insurance agent with Oxford Life Insurance in Maine, you should take immediate steps to protect yourself.

What Information Was Involved?

Oxford’s investigation, which concluded on April 17, 2025, identified files that were involved in the breach. The files contained personal information, including names and Social Security numbers, of policyholders, claimants, and insurance agents in Maine. In one case, an individual’s driver’s license or state identification number was also compromised.

Actions Taken by Oxford

Oxford Life Insurance Company has taken immediate measures to address the breach, including offering one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Experian IdentityWorks. Additionally, a toll-free call center has been established for individuals with questions or concerns.

What You Should Do

If you were affected by this breach or suspect your information may be compromised, follow these steps to protect yourself:

1. Review Your Credit Reports: It’s always advisable to regularly review your credit reports for any unauthorized activity. Even if you haven’t received a notification letter yet, checking your accounts is essential for detecting potential fraud early.

2. Enroll in Credit Monitoring: Affected individuals should activate their complimentary one-year membership to Experian IdentityWorks, which offers credit monitoring, fraud alerts, and identity restoration services to help detect and address any misuse of personal information.

3. Consider Fraud Alerts or Security Freezes: You may place a fraud alert or security freeze on your credit report to make it harder for identity thieves to open new accounts in your name. Both are free and can help protect you from further harm.

4. Monitor Your Accounts: Keep an eye on your bank and credit card statements for any suspicious activity. Promptly report any unauthorized transactions to your bank or financial institution.

Seeking Legal Assistance