Pension Benefit Information, LLC

Pension Benefit Information, LLC (PBI) notified the Delaware Attorney General of a security event involving MOVEit Transfer software. A threat actor exploited a zero-day vulnerability to access PBI's servers on May 29-30, 2023, and exfiltrated data including names, partial addresses, SSNs, and DOBs of 1,604 Delaware residents. PBI patched systems, engaged forensic specialists, and offered 24 months of credit monitoring via Kroll. Notification to residents began July 12, 2023.