Landmark Admin data breach: what happened and what to do

Landmark Admin is a company most policyholders have never heard of. It's a third-party administrator based in Brownwood, Texas, that handles paperwork and records for life insurance carriers. When a company like that is breached, the people affected are customers of the insurers it works for, not of Landmark.

What happened

According to Landmark's notice, it detected suspicious activity on its system on or about May 13, 2024 and learned on May 14 that an unauthorized third party had attempted to access its network. Its investigation covered a cybersecurity incident involving its network between May 13 and June 17, 2024.

Landmark filed notice with the Maine Attorney General on October 23, 2024, reporting about 800,000 people affected (806,519). A later Maine filing raised the number to 1,613,773, almost double, and was described as preliminary, so it could change again. State AG listings such as Washington's count only that state's residents, which is why a listing may show a much smaller figure, such as 11,691.

What was exposed

Landmark said the information involved varies for each person. Reports of the notice say the data included:

• Names
• Social Security numbers
• Tax identification numbers
• For some people: driver's license numbers, passport numbers, bank account information and medical information

If you hold or held a life insurance policy or annuity, check whether the insurer is one that uses a third-party administrator.

What this lets criminals do

A Social Security number and a name are enough for many forms of identity theft, from fraudulent credit applications to false tax returns. Insurance records add a second risk: criminals who know you hold a life insurance policy or annuity can impersonate you or your insurer, try to change beneficiaries or request payouts, or run convincing scams that quote real policy details.

What the company said

Landmark notified regulators and mailed letters to people whose data was involved, according to the state filings. Its Massachusetts and Montana filings include a copy of the consumer letter, which sets out what was involved for each person. It's common for a company in this position to offer credit monitoring, but the terms are in the letter, so check yours.

What to do now

Freeze your credit if a Social Security number was involved, and keep the letter. Insurance fraud tends to surface slowly, because a changed beneficiary or a quietly opened account may not show up for months. Check your credit reports a few times a year, and read any mail about a policy you don't recognize. If you hold a life insurance or annuity policy, contact your insurer directly, using a number on your policy documents, and ask whether extra verification can be added before changes or payouts.