HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Fidelity & Guaranty Life Insurance Company (“F&G”)
bd_3749ac746b608bbb · schema v1 · pii pii-v1
Full breach record for Fidelity & Guaranty Life Insurance Company (“F&G”) →Pension Benefit Information, LLC (PBI) disclosed a third-party software event involving its MOVEit Transfer server, exploited by an unauthorized third party on May 29-30, 2023. The breach affected data of Fidelity and Guaranty Life Insurance Company (F&G) clients, including names and government identifiers. PBI patched servers, notified affected individuals, and offered 12 months of credit monitoring via Kroll. No identity theft or fraud has been indicated.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5d9aaefe9729e42cOregon State AGfiled 2023-07-28(4d gap)Verified
- bd_2450f77b1d97c522Washington State AGfiled 2023-07-20(12d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/08/PBI-Adult-Consumer-Letter-12-mths.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 1, 2023
- Raw hash
- a32b13e2bc1dfde2d5cb2ab01e12319f99a63601bd1b91a5219edaa93400aedc
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Fidelity & Guaranty Life Insurance Company (“F&G”)norm: fidelity guaranty life insurance company f g
Incident
- Discovered
- May 29, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.