F500 Insurance Carriers · Insurance: Life, Health (Mutual) · Data breach
Mutual of Omaha Insurance
Headline
The confirmed breach was at United of Omaha Life Insurance Company, a subsidiary - which is the row's practical lesson.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The confirmed breach was at United of Omaha Life Insurance Company, a subsidiary - which is the row's practical lesson. Policyholders hold documents bearing the parent brand and would search for the parent name after hearing about a breach, finding nothing. Insurance groups operate dozens of separately chartered underwriting entities for regulatory and capital reasons, and the entity named on a breach notification is frequently one the customer has never consciously encountered.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual policyholder agreements, separate from the settled Skinner class action.
Data sharing
CONFIRMED BREACH AT SUBSIDIARY (United of Omaha Life Insurance Company, a Mutual of Omaha subsidiary): an unauthorized party accessed systems between April 21-23, 2024 (per United of Omaha's notice template filed with Massachusetts regulators, the access to one employee's email account resulted from a phishing campaign targeting its employees; unusual activity was detected April 23, 2024, and on June 28, 2024 the company discovered sensitive information may have been accessed), exposing current/former EMPLOYEES' (of companies that received a quote or group insurance from United of Omaha) personal/health information. The resulting class action (Skinner v. United of Omaha) SETTLED (final approval hearing June 25, 2025; distribution timing not verified this pass), offering up to $1,500 per person for documented losses/lost time or a $50 alternative cash payment, plus two years of credit monitoring. The company ALSO reached a separate 2023 settlement with the US DEPARTMENT OF LABOR (per Insurance Business) requiring changes to how it administers insurability requirements for participants in employer-sponsored life-insurance plans, after the agency found it frequently accepted premiums for extended periods without confirming that insurability requirements were met — a distinct regulatory matter from the data breach.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy mutualofomaha.com/privacy | Not fetched yet | NO (HTML only) |
| Terms of service mutualofomaha.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.