CNO Services, LLC Data Breach Investigation

Data Breach Blog

Data Breach

CNO Services, LLC Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

June 9, 2026

by: Almeida Law Group

Almeida Law Group is investigating a data breach at CNO Services, LLC. The breach occurred on 05/15/2026 and was discovered on 05/15/2026. If you were affected, contact Almeida Law Group.

About CNO Services, LLC

CNO Services, LLC is a corporate services subsidiary of CNO Financial Group, Inc. (NYSE: CNO), a publicly traded insurance and financial services holding company headquartered in Carmel, Indiana. CNO Financial Group operates brands including Bankers Life, Colonial Penn, Optavise, and Washington National, and CNO Services, LLC functions as a shared-services entity within that corporate structure. According to the breach notice, the associate involved in this incident had access to employment-related data as part of their job responsibilities.

What Happened?

CNO Services, LLC was listed in a Maine Attorney General filing dated June 8, 2026. The incident was a vishing attack — a form of social engineering in which a scammer used fraudulent phone calls impersonating an internal IT Service Desk to attempt to gain unauthorized access to company data. On May 15, 2026, CNO became aware of reports of these fraudulent calls targeting associates. Most associates identified the scammer or escalated the calls appropriately, but in one instance the scammer gained limited unauthorized access. CNO engaged a forensics firm to investigate and reported the incident to U.S. federal law enforcement. The investigation found no evidence that customer information was accessed and no evidence of misuse, fraud, or identity theft. Ten individuals were affected in total. Consumer notification was scheduled for June 12, 2026, with 12 months of IDX identity protection services offered at no cost.

The breach notice uses a template placeholder for the specific personal information involved, meaning the data types were customized per individual and are not publicly enumerated. The notice states that the scammer appeared motivated to target CNO’s company information rather than the personal data of individuals, and that the notification was issued out of an abundance of caution. CNO Financial Group’s subsidiary Bankers Life and Casualty Company disclosed a separate, unrelated data breach in 2018 affecting approximately 566,217 individuals, which was investigated by the Indiana Department of Insurance. No class action lawsuits or public litigation connected to this May 2026 incident were found as of June 2026.

Key Facts at a Glance

  • Company or Organization: CNO Services, LLC
  • Industry: Insurance and Financial Services
  • Location: Carmel, Indiana
  • Incident type: Vishing (social engineering / voice phishing)
  • Date of breach: May 15, 2026
  • Date breach discovered: May 15, 2026
  • Date of consumer notification: June 12, 2026
  • Total persons affected: 10
  • Identity theft protection offered: Yes — IDX, 12 months (credit and CyberScan monitoring, $1,000,000 insurance reimbursement policy, fully managed ID theft recovery)
  • Prior breach: Yes — 2018 Bankers Life and Casualty Company breach affecting approximately 566,217 individuals
  • Litigation status: No class action or public litigation found in connection with this incident as of June 2026
  • Source: Maine AG Filing; Tripwire – 2018 Bankers Life Breach; Indianapolis Business Journal – 2018 Bankers Life Breach

What Should You Do?

If you received a notice from CNO Services, LLC, you should enroll in or activate the complimentary IDX identity protection services offered — contact IDX to complete the credit monitoring activation, as CNO has already enrolled you in the program but cannot activate credit monitoring on your behalf. Beyond that, consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion) to make it harder for anyone to open new accounts in your name. Monitor your financial accounts and credit reports regularly for any suspicious or unauthorized activity, and obtain your free annual credit reports at AnnualCreditReport.com. If you believe your information has already been misused, visit IdentityTheft.gov for step-by-step guidance on recovery.

Your Legal Rights

If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.