HackingFinancial ServicesTechnologyFinanceVulnerability ExploitData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Bankers Conseco Life Insurance Company

bd_21deab48ee14b061 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 3, 2023

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Bankers Conseco Life Insurance Company →2 incidents on file

Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, affecting individuals whose full names and government identifiers were present on the accessed server. PBI patched systems, engaged in investigation, and offered 12 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

May 29, 2023

Begins

Aug 3, 2023

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_6ea538db405436fa2023-08-03Verified
Massachusetts State AGbd_98112eddb5486edb2023-08-08 · +5dCandidate

Name: Pension Benefit Information, LLC
norm: pension benefit information
Domain: mypensionbenefitinformation.com

Name: Bankers Conseco Life Insurance Company
norm: bankers conseco life insurance
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Breach occurred: May 29, 2023 – May 30, 2023
Materiality determined: —
Notification sent: Aug 3, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Patch servers
Investigate
Assess the security of our systems
Notify potentially affected customers and individuals
Reviewing and enhancing our information security policies and procedures
Offering you access to 12 months of complimentary credit monitoring and identity restoration services through Kroll
Changes made: Reviewing and enhancing our information security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGAug 3 · first

Vermont State AGAug 3 · first · this page

Massachusetts State AG+5d

Pattern: first filing Aug 3 (IN), last Aug 8 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-08-03-bankers-conseco-life-insurance-company-pbi-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2023
Raw hash: ea2c32ce2b40b0a67ede7f34b5e3cad564c778951ae14189a2b55e6c62392b7d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPension Benefit Information, LLC

Victim entityBankers Conseco Life Insurance Company

IncidentThird-Party / Supply Chain

Stated responsePatch servers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov