Nippon Life Insurance Company of America® (‘Nippon Life Benefits®’ or ‘we’) takes its privacy and security obligations seriously and is steadfast in its commitment to the protection of the confidential information of our customers. As such, we want to inform you of a data security incident on the part of Centerstone Insurance and Financial Services d/b/a BenefitMall that may involve some of your personal information*. BenefitMall is under contract with Nippon Life Benefits to act as a General Agent (to wholesale our products to the broker community) and, because of the services they provide, may have had access to your personal information as described below. However, based upon the investigation conducted by BenefitMall, there is no indication that any information has been used inappropriately.
*Notice of this security incident was provided by BenefitMall, on behalf of Nippon Life Benefits, to individuals whose information may have been exposed as a result of this incident. However, because certain individual breach notification letters sent to affected individuals were unsuccessfully delivered, we are providing this substitute form of notice.
On October 11, 2018, BenefitMall became aware that they were the target of an email phishing incident. BenefitMall reports that the incident generally occurred between June 2018 and October 11.
On November 5, 2018 we received a letter of notification from BenefitMall regarding the incident potentially impacting Nippon Life Benefits. On November 6, 2018 – within 24 hours of BenefitMall’s notification, Nippon Life Benefits convened its Incident Response Team (“IRT”). The IRT reviewed and analyzed available information from BenefitMall, assessed areas of concern and potential organizational impact, and steps for protecting the personal information of Nippon Life Benefits customers.
Emails in the affected BenefitMall mailboxes included customer name, address, social security number, date of birth, bank account number, and information relating to payment of insurance premiums.
Upon learning of the incident, BenefitMall immediately initiated an internal review. They also retained a top computer forensics firm to help conduct a thorough investigation of the incident and remediate their systems. BenefitMall has reported the incident to law enforcement and will continue to work closely with them during their review.
To help prevent a similar type of incident from occurring in the future, BenefitMall has implemented additional security measures designed to protect its employee email accounts and your information, including two-factor authentication for access to their email system. BenefitMall has also undertaken an employee education initiative to inform its employees about phishing scams and how to guard against them and will continue to deliver additional employee training about email safety and recognizing phishing emails. BenefitMall will also continue to cooperate with Nippon Life Benefits and state regulators as appropriate.
For more information regarding this incident, including whether your personal information may have been affected by this incident, and to learn about the complimentary services BenefitMall has arranged for affected consumers, please contact us at:
800-374-1835 – English
800-971-0638 – Japanese
877-827-8713 – Korean
Contact information for the three nationwide credit reporting companies is as follows:
The following information reflects recommendations from the Federal Trade Commission regarding identity theft protection.
Free Credit Report. We remind you to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity. You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. You can also order your annual free credit report by mailing a completed Annual Credit Report Request Form (available from the U.S. Federal Trade Commission’s (“FTC”) website at www.consumer.ftc.gov) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, Georgia 30348-5281.
For Colorado, Georgia, Maine, Maryland, Massachusetts, New Jersey, Puerto Rico, and Vermont Residents: You may obtain one or more additional copies of your credit report, free of charge. You must contact each of the credit reporting agencies directly to obtain such additional report(s).
Medical Privacy. We recommend that you regularly review the explanation of benefits statements that you receive from Nippon Life Benefits. If you see any service that you believe you did not receive, please contact Nippon Life Benefits at the number on the statement.
You may want to order copies of your credit reports and check for any medical bills that you do not recognize. If you find anything suspicious, call the credit reporting agency at the phone number on the report. Keep a copy of this notice for your records in case of future problems with your medical records. You may also want to request a copy of your medical records from your provider, to serve as a baseline.
For California residents: We also suggest that you visit the website of the California Office of Privacy Protection at www.privacy.ca.gov to find more information about your medical privacy.
Fraud Alert. You may place a fraud alert in y our file by calling one of the three nationwide credit reporting agencies above. A fraud alert tells creditors to follow certain procedures, including contacting you before they open any new accounts or change your existing accounts. For that reason, placing a fraud alert can protect you, but also may delay you when you seek to obtain credit. Pursuant to the Economic Growth, Regulatory Relief, and Consumer Protection Act, you may place a fraud alert on your file free of charge.
For Colorado and Illinois residents: You may obtain additional information from the credit reporting agencies and the FTC about fraud alerts.
Security Freeze. You have the ability to place a security freeze on your credit report. A security freeze is intended to prevent credit, loans and services from being approved in your name without your consent. To place a security freeze on your credit report, you may be able to use an online process, an automated telephone line, or a written request to any of the three credit reporting agencies listed above.
The following information must be included when requesting a security freeze (note that if you are requesting a credit report for your spouse, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) current address and any previous addresses for the past five years; and (5) any applicable incident report or complaint with a law enforcement agency or the Registry of Motor Vehicles. The request must also include a copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. It is essential that each copy be legible, display your name and current mailing address, and the date of issue. The credit reporting agencies may charge a fee to place a freeze, temporarily lift or permanently remove it. The fee is waived if you are a victim of identity theft and have submitted a valid investigative or law enforcement report or complaint relating to the identity theft incident to the credit reporting agencies. (You must review your state’s requirement(s) and/or credit bureau requirement(s) for the specific document(s) to be submitted.) Pursuant to the Economic Growth, Regulatory Relief, and Consumer Protection Act, you may place a security freeze on your credit report free of charge.
Federal Trade Commission and State Attorneys General Offices. If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your home state. You may also contact these agencies for information on how to prevent or avoid identity theft. You may contact the Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, D.C. 20580, www.ftc.gov/bcp/edu/microsites/idtheft/, 1-877-IDTHEFT (438-4338).
For Maryland residents: You may contact the Maryland Office of the Attorney General, Consumer Protection Division, 200 St. Paul Place, Baltimore, MD 21202, www.oag.state.md.us, 1-888-743-0023.
For North Carolina residents: You may contact the North Carolina Office of the Attorney General, Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699-9001, www.ncdoj.gov, 1-877-566-7226.
For Rhode Island residents: You may contact the Rhode Island Office of the Attorney General, 150 South Main Street, Providence, RI 02903, http://www.riag.ri.gov, 401-274-4400.
Reporting of identity theft and obtaining a police report. You have the right to obtain any police report filed in the United States in regard to this incident. If you are the victim of fraud or identity theft, you also have the right to file a police report.
For Iowa residents: You are advised to report any suspected identity theft to law enforcement or to the Iowa Attorney General.
For Massachusetts residents: You have the right to obtain a police report if you are a victim of identity theft. You also have a right to file a police report and obtain a copy of it.
For Oregon residents: You are advised to report any suspected identity theft to law enforcement, the Federal Trade Commission, and the Oregon Attorney General.
For Rhode Island residents: You have the right to file or obtain a police report regarding this incident.