HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
MILLIMAN, INC.
bd_3fef9efdde8291dc · schema v1 · pii pii-v1
Full breach record for MILLIMAN, INC. →Milliman, Inc. reported an external system breach (hacking) occurring on May 29, 2023, discovered on May 30, 2023. The incident affected 56,457 individuals, including 224 Maine residents. Personal Identifiable Information (PII) compromised included names and Social Security Numbers. Milliman issued written notifications and provided 4 months of identity and credit monitoring through Kroll.
Maine clockDiscovered May 30, 2023 → Filed with AG Jan 12, 2024227d ✗ ME AG >90d32 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2c4f45cb4ab5648dVermont State AGfiled 2024-01-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/05d64329-7db7-4ece-baaa-3f98583b4eb6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2024
- Raw hash
- 2f01c42723d67682e28fea192048dec231708968da68e6bf135294b5eb5d9ace
Reporting entity
- Name
- MILLIMAN, INC.norm: milliman
Victim entity
- Name
- MILLIMAN, INC.norm: milliman
Incident
- Discovered
- May 30, 2023
- Materiality determined
- —
- Notification sent
- Jan 12, 2024
- Affected individuals
- 56,457
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 32 weeks(227 days from discovery to filing)
- Compliance flags
- ME AG >90d · 227dME resident >180d · 227d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 30, 2023→ Filed with AG: Jan 12, 2024227d 90 days ME AG >90d Maine Discovered: May 30, 2023→ Notified: Jan 12, 2024227d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.