TIAA Kaspick, LLC
bd_05f642e9efff15cc · schema v1 · pii pii-v1
Full breach record for TIAA Kaspick, LLC →TIAA Kaspick, LLC reported a data breach impacting 359 Maine residents after a vendor, Pension Benefit Information, LLC (PBI), was affected by a zero-day exploit in its MOVEit Transfer server. The breach, which occurred between May 29 and May 30, 2023, and was discovered on June 23, 2023, resulted in the acquisition of names and Social Security numbers. TIAA Kaspick is offering two years of complimentary credit monitoring and identity theft restoration services through Kroll.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
Jun 23, 2023
Discovered
Jul 27, 2023
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- California State AGbd_b82d3fc6babe68a12023-07-27Verified
- Idaho State AGbd_fa66956c081fbea72023-07-27Verified
- Washington State AGbd_27e08831a02007b62023-07-28 · +1dVerified by operator
- New Hampshire State AGbd_8ae2f91c9a2c0c122023-07-26 · +1dVerified
Show 3 more filings ↓Show fewer ↑up to 13d gap
- Montana State AGbd_f2b549864eb15db82023-07-26 · +1dCandidate
- Massachusetts State AGbd_7ab15396154faaa52023-07-17 · +10dVerified by operator
- Indiana State AGbd_52169e34f1cf02cf2023-07-14 · +13dVerified by operator
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jul 14 (IN), last Jul 28 (WA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.