The Maine Office of the Attorney General reported a data breach involving New York Life Insurance Company on October 23, 2023. The breach occurred between May 30, 2023, and May 31, 2023, due to an external system breach involving unauthorized access, affecting 30,167 individuals, including 38 Maine residents. The compromised information includes Social Security Numbers, and identity theft protection services were offered for 12 months through Experian IdentityWorks.

On September 28, 2021, the Maine Office of the Attorney General reported a data breach involving New York Life Insurance Company. The breach occurred from April 13, 2021, to May 12, 2021, and involved a phishing attack that compromised personal information, including Social Security numbers, affecting 1,749 individuals in total with 3 residents particularly noted.

On March 3, 2021, New York Life Insurance Company reported an inadvertent disclosure of personal information due to a misconfigured document upload. In response to a request from the Wyoming Department of Insurance, a file containing sensitive details of 749 individuals—including names, partial Social Security numbers (last four digits), certificate numbers, genders, dates of birth, benefit amounts, and annuity forms—was mistakenly published on a public insurance filings website from July 2020 to February 5, 2021. The exposed data pertained to at least one Maine resident, among others. The breach stemmed from human error during a routine regulatory submission, leading to prolonged unauthorized access to personally identifiable information (PII). While no evidence of malicious exploitation was reported, the incident posed risks of identity theft, financial fraud, or phishing attacks targeting affected individuals. The company likely initiated remediation measures, including notification to impacted parties and regulatory bodies, but the exposure duration (over six months) amplified potential consequences for those whose data was compromised.