Almeida Law Group is investigating a data breach at CNO Services, LLC. The breach occurred on May 15th, 2026 and was discovered on May 15th, 2026. If you were affected, contact Almeida Law Group.
About CNO Services, LLC
CNO Services, LLC is a corporate services and shared-services subsidiary of CNO Financial Group, Inc. (NYSE: CNO), a publicly traded insurance and financial services holding company headquartered in Carmel, Indiana. CNO Financial Group operates brands including Bankers Life, Colonial Penn, Optavise, and Washington National. CNO Services, LLC also operates several Colonial Penn-branded websites.
What Happened?
CNO Services, LLC was listed in a Texas Attorney General data security breach report (record ID BR-0005155, published July 3rd, 2026). On May 15th, 2026, CNO Services detected fraudulent phone calls targeting a small group of its associates. The callers impersonated the company’s IT Service Desk in a social engineering scheme known as vishing. While most employees recognized the scam, one call resulted in limited unauthorized access to corporate systems containing employment-related data. CNO Services engaged an outside cybersecurity and forensics firm and reported the incident to federal law enforcement. The company’s breach notice characterized the attacker as motivated to target company information rather than personal data, and said notification was issued out of an abundance of caution. Consumer notifications were sent by U.S. Mail, and IDX identity protection services were offered to affected individuals.
The Texas AG filing reports 11,786 total individuals affected, including 530 Texans. The data types identified in the Texas AG filing include names, Social Security numbers, and dates of birth. It is worth noting a discrepancy in reported scope: a separate filing with the Maine Attorney General on June 8th, 2026 reported only 10 individuals affected, which may reflect an earlier, more limited estimate before the full forensic investigation was complete. No ransomware group or specific threat actor has been publicly attributed to this incident. As of early July 2026, no class action lawsuit has been filed, though Dapeer Law, P.A. and Federman & Sherwood have each announced investigations into potential class action claims related to this breach.
Key Facts at a Glance
- Company or Organization: CNO Services, LLC
- Industry: Insurance Services (subsidiary of CNO Financial Group, Inc.)
- Location: Carmel, Indiana 46032
- Incident type: Vishing (social engineering) attack resulting in unauthorized access to corporate systems
- Date of breach: May 15th, 2026
- Date breach discovered: May 15th, 2026
- Date of consumer notification: June 8th, 2026 (Maine AG filing date; Texas AG report published July 3rd, 2026)
- Total persons affected: 11,786
- Identity theft protection offered: Yes — IDX identity protection services
- Prior breach: Yes — In 2018, CNO Financial Group subsidiary Bankers Life and Casualty Company disclosed a breach affecting approximately 566,217 individuals following unauthorized access to employee credentials
- Litigation status: No class action filed as of early July 2026; Dapeer Law, P.A. and Federman & Sherwood have announced investigations into potential class actions
- Source: Texas Attorney General data security breach report, BR-0005155 (https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005155); Dapeer Law investigation (https://www.dapeer.com/databreaches/cno-services-data-breach-investigation); Federman & Sherwood investigation (https://www.federmanlaw.com/blog/cno-services-llc-data-breach-investigated-by-federman-sherwood/)
What Should You Do?
If you received a notification letter from CNO Services, LLC, enroll in the IDX identity protection services offered — check your letter for the enrollment deadline and instructions. Whether or not you enroll, consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion) to help prevent new accounts from being opened in your name. Monitor your existing financial accounts and review your credit reports for any unfamiliar activity. You can request a free credit report from each bureau at AnnualCreditReport.com. If you suspect your information has already been misused, visit IdentityTheft.gov to report it and get a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
