HackingStolen CredentialsData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Pension Benefit Information, LLC
bd_4ebd06181be88166 · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →Pension Benefit Information, LLC (PBI) notified Delaware AG of a third-party software vulnerability in Progress Software's MOVEit Transfer application. An unauthorized third party accessed PBI's MOVEit servers on May 29-30, 2023, downloading consumer data. PBI patched servers, investigated, and offered 12 months of identity monitoring via Kroll. The incident involved identity and government-issued data for a limited number of consumers.
This filing is one of 40 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_1740e31b7167fe7dVermont State AGfiled 2023-08-16(30d gap)Verified
- bd_2b476a800589524eDelaware State AGfiled 2023-08-16(30d gap)Verified
- bd_a82b696d6cce10e6Vermont State AGfiled 2023-08-18(32d gap)Verified
- bd_6c08967123b07af5Vermont State AGfiled 2023-08-23(37d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 64d gap
- bd_00fe2e9a4aff5280Vermont State AGfiled 2023-08-24(38d gap)Verified
- bd_07101c97c9594fc4Maine State AGfiled 2023-08-24(38d gap)Verified
- bd_90bb6fe25069dbd5Vermont State AGfiled 2023-08-24(38d gap)Verified
- bd_ccca38986587393cCalifornia State AGfiled 2023-08-24(38d gap)Verified
- bd_a8e1e642699a092dCalifornia State AGfiled 2023-09-01(46d gap)Verified
- bd_83b0b7e92e935f83California State AGfiled 2023-09-19(64d gap)Verified
Showing first 10 of 39 linked disclosures.
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/07/Milliman-Solutions-Inc-PBI-Sample-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2023
- Raw hash
- fb19b5400516688da62d7f09016db3210303e7db6d0f4876b908d4c2eed34589
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.