Tiaa-cref Life Insurance Company
bd_5876c4c2a15a0cb7 · schema v1 · pii pii-v1
Full breach record for Tiaa-cref Life Insurance Company →5 incidents on fileTIAA-CREF Life Insurance Company notified the California AG of a data breach involving its third-party service provider, Pension Benefit Information, LLC (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer product to access PBI's servers on May 29-30, 2023, and exfiltrated data. The compromised information included names, Social Security numbers, dates of birth, addresses, and gender. PBI patched servers, investigated the incident, and is offering 24 months of identity monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
May 31, 2023
Discovered
Aug 1, 2023
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Idaho State AGbd_159519eb728b514e2023-08-01Candidate
- Massachusetts State AGbd_a903f29f5cdcd31c2023-08-02 · +1dVerified
- Montana State AGbd_c409725c75cde49b2023-08-02 · +1dVerified
- Washington State AGbd_e470d727916117af2023-08-02 · +1dVerified
Show 1 more filing ↓Show fewer ↑up to 4d gap
- Indiana State AGbd_637bad0cdc32a2592023-07-28 · +4dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jul 28 (IN), last Aug 2 (WA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.