Group 1001 Insurance Holdings said it detected ransomware on its IT infrastructure on February 9, 2023, in an attack that interrupted systems at several of its member companies.
The affected businesses were Delaware Life Insurance Company, Delaware Life Insurance Company of New York, Clear Spring Life and Annuity Company, Clear Spring Property and Casualty Company and the Clear Spring Health business. The company's Gainbridge annuity platform was not affected.
Group 1001 said it did not pay a ransom. It engaged outside forensic experts, who concluded the intrusion had been contained and that no additional systems were compromised. The company scanned for indicators of compromise, remediated what it found and deployed new endpoint detection and network monitoring tools. Regulators and the FBI were notified, and the FBI investigation continued.
On March 1, 2023 the company announced that all of its member companies were back to full functionality. Group 1001 did not name the group behind the attack and said it would contact anyone whose information was involved once the forensic review was complete. Ratings agency AM Best left the affected subsidiaries' credit ratings unchanged, concluding that the attack had no material financial impact.