Company Details
washington-national-insurance-company
429
3,829
524
washingtonnational.com
0
WAS_3144027
In-progress

Washington National Insurance Company Company CyberSecurity Posture
washingtonnational.comAbout Washington National Insurance Company At Washington National, we're dedicated to serving the needs of Americans who've worked hard and want to protect the health and well-being of themselves and their loved ones. Our supplemental health and life insurance products have helped provide peace of mind since 1911. Washington National offers a full line of supplemental health and life insurance products, through a nationwide network of independent insurance agents serving middle-income Americans. Washington National is an experienced leader in the voluntary worksite and individual markets.
Company Details
washington-national-insurance-company
429
3,829
524
washingtonnational.com
0
WAS_3144027
In-progress
Between 650 and 699

WNIC Global Score (TPRM)XXXX

Description: The Maine Office of the Attorney General reported a data breach involving Bankers Life and Casualty Company on December 30, 2021. The breach, which occurred on September 29, 2021, involved a business email compromise that potentially compromised the Social Security Numbers of 377 individuals, including 1 resident. Twelve months of identity theft protection services through IDX were offered as a response.
Description: The California Office of the Attorney General reported on October 25, 2018, that Bankers Life experienced a data breach that occurred between May 30, 2018, and September 13, 2018. Unauthorized third parties accessed employee credentials, potentially exposing personal information of policyholders including names, addresses, dates of birth, and insurance information.
Description: The breach was reported by Bankers Life on January 26, 2024, concerning a SIM swapping attack that occurred on November 29, 2023. The incident potentially exposed personal information, including names, social security numbers, dates of birth, and policy numbers, although it is believed that the threat actor primarily targeted company data rather than individual personal information.
Description: The Maine Office of the Attorney General reported a data breach involving CNO Financial Group, Inc. on July 20, 2021. The breach, which occurred from December 1, 2020 to January 20, 2021, involved an external system breach (hacking) affecting a total of 562 individuals, with at least 1 resident of Maine affected. The compromised information includes Social Security numbers.
Description: The Maine Office of the Attorney General reported that Washington National Insurance Company experienced a data breach on October 6, 2023, involving inadvertent disclosure of information affecting 424 individuals total, including 1 resident. The company offered identity theft protection services through IDX, a ZeroFox Company, for 12 months following the incident.
Description: On January 30, 2024, the Maine Office of the Attorney General reported a data breach involving Washington National Insurance Company that occurred on November 28, 2023. The breach involved unauthorized access through a SIM swapping attack, affecting 20,360 individuals, including compromised Social Security numbers.


No incidents recorded for Washington National Insurance Company in 2025.
No incidents recorded for Washington National Insurance Company in 2025.
No incidents recorded for Washington National Insurance Company in 2025.
WNIC cyber incidents detection timeline including parent company and subsidiaries

About Washington National Insurance Company At Washington National, we're dedicated to serving the needs of Americans who've worked hard and want to protect the health and well-being of themselves and their loved ones. Our supplemental health and life insurance products have helped provide peace of mind since 1911. Washington National offers a full line of supplemental health and life insurance products, through a nationwide network of independent insurance agents serving middle-income Americans. Washington National is an experienced leader in the voluntary worksite and individual markets.


Somos la empresa aseguradora multirramo 100% mexicana de mayor experiencia y solidez de nuestro país. Por más de 116 años hemos protegido a las familias mexicanas, respaldando sus sueños, historias, emociones y vivencias. Estamos orgullosos de formar parte de uno de los conglomerados empresariales

At MAPFRE, we’re committed to protecting what matters most to you. That’s why we’re the largest Spanish-owned insurer in the world, the largest multinational insurance company in Latin America and among the 15 largest European groups by premium volume. With a legacy spanning more than 90 years, we’r

Established in July 2005, Sunshine Insurance Group has experienced sustainable development, now ranking among the Top 7 insurance groups in China, with an annual business income of $12.6 billion in 2016. Sunshine is composed of Property and Casualty Insurance, Life Insurance, Credit and Guarantee In

GEICO (Government Employees Insurance Company) offers a variety of insurance such as vehicle, property, business, life, umbrella, travel, pet, jewelry and more. The company, which was founded in 1936, is the third-largest auto insurer in the United States and insures vehicles in all 50 states an

Bajaj Allianz Life Insurance, one of the fastest-growing life insurers, is a joint venture between Bajaj Finserv Limited, one of the most diversified financial institutions in India, and Allianz SE, a leading global financial services provider with a presence in 70+ countries. Our remarkable journe

At State Farm®, our mission is to help people manage the risks of everyday life, recover from the unexpected, and realize their dreams. We are passionate and driven to create possibilities, and we’re serious about helping customers by providing solutions for all of life’s moments. Like a good neighb

Nationwide, a Fortune 100 company based in Columbus, Ohio, is one of the largest and strongest diversified insurance and financial services organizations in the United States. Nationwide is rated A+ by Standard & Poor's. An industry leader in driving customer-focused innovation, Nationwide provides
We live in a time of unprecedented change. A time when economies, regulations, and social safety nets are all in flux. Customers around the globe have told us they’re overwhelmed by the pace of change and are looking for a trusted partner to help them manage life’s twists and turns. MetLife is com

QBE is an international insurer and reinsurer listed on the Australian Securities Exchange and headquartered in Sydney. We employ over 13,000 people in 26 countries. Leveraging our deep expertise and insights, QBE offers commercial, personal and specialty products and risk management solutions to h
.png)
Our commitment to audit quality. At EY US, we are bringing our bold vision for the future of audit to life with quality at the center,...
E&E NEWS PM | A funeral service for Jane Goodall, the trailblazing primatologist and conservationist who transformed the world's...
A prolonged U.S. government shutdown is straining the nation's cybersecurity defenses, leaving key agencies understaffed as our adversaries...
WASHINGTON — The Cybersecurity and Infrastructure Security Agency (CISA) is among the offices being permanently downsized as a result of the...
The most influential women in Washington who are shaping government, business, the arts, education, law, media, and nonprofits.
Medicare Supplement plans are a great way to save on out-of-pocket costs if you have Original Medicare. Thirty private health insurance...
Discover the best Medicare Supplement plans in Texas in 2025, and learn the average cost of premiums, the variety of providers available and...
Medicare is a federal health insurance program designed to provide coverage for Americans over 65 or with certain disabilities.
The best home insurance companies of 2025, including Amica (Best Overall), State Farm (Best for Bundling Policies), AIG (Best for High Value...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Washington National Insurance Company is http://www.WashingtonNational.com.
According to Rankiteo, Washington National Insurance Company’s AI-generated cybersecurity score is 654, reflecting their Weak security posture.
According to Rankiteo, Washington National Insurance Company currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Washington National Insurance Company is not certified under SOC 2 Type 1.
According to Rankiteo, Washington National Insurance Company does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Washington National Insurance Company is not listed as GDPR compliant.
According to Rankiteo, Washington National Insurance Company does not currently maintain PCI DSS compliance.
According to Rankiteo, Washington National Insurance Company is not compliant with HIPAA regulations.
According to Rankiteo,Washington National Insurance Company is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Washington National Insurance Company operates primarily in the Insurance industry.
Washington National Insurance Company employs approximately 429 people worldwide.
Washington National Insurance Company presently has no subsidiaries across any sectors.
Washington National Insurance Company’s official LinkedIn profile has approximately 3,829 followers.
Washington National Insurance Company is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.
No, Washington National Insurance Company does not have a profile on Crunchbase.
Yes, Washington National Insurance Company maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/washington-national-insurance-company.
As of December 10, 2025, Rankiteo reports that Washington National Insurance Company has experienced 6 cybersecurity incidents.
Washington National Insurance Company has an estimated 15,004 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with offered 12 months of identity theft protection services through idx, and third party assistance with idx, a zerofox company, and remediation measures with identity theft protection services for 12 months..
Title: Bankers Life and Casualty Company Data Breach
Description: A business email compromise potentially compromised the Social Security Numbers of 377 individuals.
Date Detected: 2021-09-29
Date Publicly Disclosed: 2021-12-30
Type: Data Breach
Attack Vector: Business Email Compromise
Title: Data Breach at Washington National Insurance Company
Description: Unauthorized access through a SIM swapping attack affecting 20,360 individuals, including compromised Social Security numbers.
Date Detected: 2024-01-30
Date Publicly Disclosed: 2024-01-30
Type: Data Breach
Attack Vector: SIM Swapping
Title: CNO Financial Group Data Breach
Description: The Maine Office of the Attorney General reported a data breach involving CNO Financial Group, Inc. on July 20, 2021. The breach, which occurred from December 1, 2020 to January 20, 2021, involved an external system breach (hacking) affecting a total of 562 individuals, with at least 1 resident of Maine affected. The compromised information includes Social Security numbers.
Date Detected: 2021-07-20
Date Publicly Disclosed: 2021-07-20
Type: Data Breach
Attack Vector: External System Breach (Hacking)
Title: Washington National Insurance Company Data Breach
Description: The Maine Office of the Attorney General reported that Washington National Insurance Company experienced a data breach on October 6, 2023, involving inadvertent disclosure of information affecting 424 individuals total, including 1 resident. The company offered identity theft protection services through IDX, a ZeroFox Company, for 12 months following the incident.
Date Detected: 2023-10-06
Type: Data Breach
Title: Bankers Life Data Breach
Description: Unauthorized third parties accessed employee credentials, potentially exposing personal information of policyholders including names, addresses, dates of birth, and insurance information.
Date Detected: 2018-09-13
Date Publicly Disclosed: 2018-10-25
Type: Data Breach
Attack Vector: Compromised Credentials
Vulnerability Exploited: Employee Credentials
Threat Actor: Unauthorized Third Parties
Title: Bankers Life SIM Swapping Attack
Description: A SIM swapping attack on Bankers Life potentially exposed personal information, including names, social security numbers, dates of birth, and policy numbers. The threat actor primarily targeted company data rather than individual personal information.
Date Detected: 2024-01-26
Type: Data Breach
Attack Vector: SIM Swapping
Motivation: Data Theft
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Social security numbers
Identity Theft Risk: High

Data Compromised: Social security numbers

Data Compromised: Social security numbers

Data Compromised: Names, Addresses, Dates of birth, Insurance information

Data Compromised: Names, Social security numbers, Dates of birth, Policy numbers
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Social Security Numbers, Social Security Numbers, , Social Security Numbers, , Personal Information, Names, Addresses, Dates Of Birth, Insurance Information, , Personal Information, Company Data and .

Entity Name: Bankers Life and Casualty Company
Entity Type: Insurance Company
Industry: Insurance
Customers Affected: 377

Entity Name: Washington National Insurance Company
Entity Type: Insurance Company
Industry: Insurance
Customers Affected: 20360

Entity Name: CNO Financial Group, Inc.
Entity Type: Company
Industry: Financial Services
Customers Affected: 562

Entity Name: Washington National Insurance Company
Entity Type: Insurance Company
Industry: Insurance
Customers Affected: 424

Entity Name: Bankers Life
Entity Type: Insurance Company
Industry: Insurance

Remediation Measures: Offered 12 months of identity theft protection services through IDX

Third Party Assistance: IDX, a ZeroFox Company
Remediation Measures: Identity theft protection services for 12 months
Third-Party Assistance: The company involves third-party assistance in incident response through IDX, a ZeroFox Company.

Type of Data Compromised: Social Security Numbers
Number of Records Exposed: 377
Sensitivity of Data: High
Personally Identifiable Information: Social Security Numbers

Type of Data Compromised: Social security numbers
Number of Records Exposed: 20360

Type of Data Compromised: Social security numbers
Number of Records Exposed: 562
Sensitivity of Data: High

Type of Data Compromised: Personal Information
Number of Records Exposed: 424

Type of Data Compromised: Names, Addresses, Dates of birth, Insurance information

Type of Data Compromised: Personal information, Company data
Sensitivity of Data: High
Personally Identifiable Information: NamesSocial Security NumbersDates of BirthPolicy Numbers
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Offered 12 months of identity theft protection services through IDX, , Identity theft protection services for 12 months.

Source: Maine Office of the Attorney General
Date Accessed: 2021-12-30

Source: Maine Office of the Attorney General
Date Accessed: 2024-01-30

Source: Maine Office of the Attorney General
Date Accessed: 2021-07-20

Source: Maine Office of the Attorney General

Source: California Office of the Attorney General
Date Accessed: 2018-10-25
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Maine Office of the Attorney GeneralDate Accessed: 2021-12-30, and Source: Maine Office of the Attorney GeneralDate Accessed: 2024-01-30, and Source: Maine Office of the Attorney GeneralDate Accessed: 2021-07-20, and Source: Maine Office of the Attorney General, and Source: California Office of the Attorney GeneralDate Accessed: 2018-10-25.
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as IDX, a ZeroFox Company.
Last Attacking Group: The attacking group in the last incident was an Unauthorized Third Parties.
Most Recent Incident Detected: The most recent incident detected was on 2021-09-29.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2018-10-25.
Most Significant Data Compromised: The most significant data compromised in an incident were Social Security Numbers, , Social Security numbers, , Social Security numbers, , Personal Information, Names, Addresses, Dates of Birth, Insurance Information, , Names, Social Security Numbers, Dates of Birth, Policy Numbers and .
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was IDX, a ZeroFox Company.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Policy Numbers, Names, Social Security Numbers, Personal Information, Social Security numbers, Addresses, Insurance Information and Dates of Birth.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 1.6K.
Most Recent Source: The most recent source of information about an incident are Maine Office of the Attorney General and California Office of the Attorney General.
.png)
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.
ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.
ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.
NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.