Item 8.01 Other Events.
As disclosed on October 17, 2024, Globe Life Inc. (the “Company”) received communications from an unknown threat actor seeking to extort money from the Company in exchange for not disclosing certain information held and used by the Company and its independent agents. The Company is filing this amendment (this “Amendment”) to amend and supplement the Original Form 8-K.
As originally disclosed, pursuant to the Company’s incident response plan and with the assistance of external cybersecurity experts and legal counsel, the Company verified the threat actor had obtained the personally identifiable information of approximately 5,000 individuals¹,². With the assistance of these external advisors, the Company confirmed that data categories, including names, email addresses, phone numbers, postal addresses, and in some instances dates of birth, Social Security numbers, health-related data and other insurance policy information, were obtained³ and that certain of this data was distributed to short sellers and plaintiffs’ attorneys⁴. The investigation determined the exposure by the threat actor did not include personally identifiable financial information. The Company did not pay the demanded extortion payment and instead notified federal law enforcement and continues to assist law enforcement in the investigation of this activity. The Company has initiated the process to provide notification to, and credit monitoring services for, these individuals.⁵
Based on the Company’s review, the customer information was traced to specific databases maintained by a small number of independent agency owners⁶. The Company was not able to confirm if the threat actor acquired information from these databases at the targeted agencies beyond that relating to the approximately 5,000 individuals. Out of an abundance of caution, the Company has also initiated the process to provide voluntary notifications to, and credit monitoring services for, approximately 850,000 additional individuals whose information was also stored in the relevant databases, even though the Company has not been able to confirm if the threat actor acquired these additional individuals’ data.
The Company has confirmed the extortion attempts did not involve the use of ransomware or result in any interruption to the Company’s systems, services, or business operations.⁷ The Company continues to communicate with regulatory authorities and law enforcement. The Company will seek reimbursement of costs, expenses and losses stemming from this matter by submitting claims to its insurers. The timing and amount of any such reimbursements is not known at this time. As of the date of this filing, the Company believes this incident has not materially impacted its operations and does not expect this incident is reasonably likely to have a material impact on the Company, including its financial condition or results of operations.⁸,⁹,¹⁰
Forward-Looking Statements
Certain statements made in Item 8.01 of this Current Report on Form 8-K constitute forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. Forward-looking statements can be identified by the use of words such as “may,” “will,” “plan,” “intend,” “potential,” “should,” “expect,” “anticipate” or comparable terminology. Such forward-looking statements are based upon current beliefs and expectations but are inherently subject to certain risks and uncertainties, many of which the Company cannot predict with accuracy and some of which are beyond the Company’s control, and involve factors that may cause actual results to differ materially from those expected or suggested. Readers are cautioned not to place undue reliance on these forward-looking statements and are advised to consider the factors under the headings “Cautionary Statements” and “Risk Factors” in the Company’s Annual Report on Form 10-K for the year ended December 31, 2023, as further amended and supplemented by the Company’s other filings with the Commission. These forward-looking statements speak only as of the date of this report, and the Company specifically disclaims any obligation to update or revise any forward-looking statement because of new information, future developments or otherwise.