Oxford Life Insurance Company Data Breach

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Oxford Life data breach.

As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.

On February 20, 2025, Oxford Life Insurance Company learned it had experienced a data breach incident after a user noticed unusual activities on its IT network. The company, a provider of life insurance and annuity products, implemented measures to manage the situation and engaged a third-party forensic firm to conduct an investigation. Notably, the Oxford Life Insurance Company data breach did not involve ransomware, and the company's systems remained unencrypted. The investigation uncovered that an unauthorized individual accessed Oxford Life's network for about an hour, during which some files were copied. The breach was traced back to a social engineering attack, where the perpetrator impersonated a collections company to gain access to an employee’s computer. 

Following a review of potentially impacted files, completed on April 18, 2025, Oxford Life Insurance Company discovered that personal information belonging to certain individuals, including policyholders, claimants, and insurance agents, had been compromised. A notice provided to the Massachusetts Office of Consumer Affairs and Business Regulation indicates that Social Security numbers, financial account information and driver's licenses were exposed in the Oxford Life Insurance Company data breach. A report submitted to the Texas Attorney General adds that medical and health insurance information may have also been compromised.

If your information was exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Oxford Life to ensure it takes proper steps to protect the information it was entrusted with.