February 17, 2025 – On June 14 2024 we published out letter to US insurance commissioners detailing Globe Life’s data security failures. One of these vulnerabilities remains unresolved nearly 9 months later. Below is a redacted copy of a letter we sent to US insurance commissioners regarding this ongoing data security failure and Globe Life’s complete failure to resolve it. To protect this information we have redacted the method of access and policyholder names, policy numbers and phone numbers.
Significant policyholder data has been publicly available for at least 8 months, though we suspect it has been unsecured for far longer. This demonstrates a clear and persistent disregard for required data protection and management practices.