June 14, 2024 – This morning, Globe Life reported it received concerns of vulnerabilities related to access permissions to consumer and policyholder information. This is a direct result of Viceroy having been able to evidence significant vulnerabilities in the data privacy and protection practices of Globe Life Inc and its subsidiaries.
We report that Protected Health Information (PHI) records of Globe Life’s clients are freely accessible via online portals with universal login credentials distributed by agents across the web.
While Globe Life reports that the vulnerabilities have been patched, Viceroy has still been able to re-access consumer and policyholder data. We do not intend to disclose instructions on how to access live data and have not retained exploited data except for the purposes of reporting it to regulatory authorities.
We note that Health Insurance Portability and Accountability Act (HIPAA) violations carry severe penalties and attract expensive civil suits. Globe life fails to meet their legal obligations to safeguard policyholders’ personal and private information.