UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDFinancial accountFinancial credentialsEmploymentCriticalContained

MILLIMAN, INC.

bd_5fb2b809a54c9f68 · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

Aug 14, 2023

To disclose

—

Affected

1,000,000

Linked

10 filings

Confidence

62%

Full breach record for MILLIMAN, INC. →5 incidents on file

Milliman, Inc. reported a data breach occurring between May 29 and May 30, 2023, affecting approximately 1 million individuals. The incident involved unauthorized access to personal information including names, addresses, Social Security numbers, and financial data. The company engaged forensic investigators and is offering credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

May 29, 2023

Begins

Aug 14, 2023

Filed

This filing is one of 10 filings about the same incident.View merged incident

Part of Pension Benefit Information, LLC supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_61914e30e6a7f2e72023-08-14Verified
Massachusetts State AGbd_6f1acd087e5dc3602023-08-14Verified
Maine State AGbd_847189c2c427ed3b2023-08-14Candidate
Washington State AGbd_b71e461fa51aa4b22023-08-14Verified

Show 5 more filings ↓up to 4d gap

Oregon State AGbd_c290a9c83b4262b52023-08-14Verified
Idaho State AGbd_d1cb5766b2805d522023-08-14Verified
Montana State AGbd_efdfa8d0534820d32023-08-14Verified
New Hampshire State AGbd_0784ee17d069ca5f2023-08-17 · +3dVerified
Maine State AGbd_ef7ad7a4aedf79b12023-08-18 · +4dVerified

Name: MILLIMAN, INC.
norm: milliman
Domain: us.milliman.com

Name: MILLIMAN, INC.
norm: milliman
Domain: us.milliman.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: May 29, 2023 – May 30, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 1,000,000nationwide
Data types: PIIIdentity (basic)Government IDFinancial accountFinancial credentialsEmployment
Attack vector: Unknown

During the incident: Engaged a third-party forensic firm to conduct an investigation
Notified law enforcement
Implemented additional security measures
Changes made: Offering up to two years of complimentary credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Indiana State AGAug 14 · first

Massachusetts State AGAug 14 · first

Maine State AGAug 14 · first

Washington State AGAug 14 · first

Oregon State AGAug 14 · first

Idaho State AGAug 14 · first

Montana State AGAug 14 · first

California State AGAug 14 · first · this page

New Hampshire State AG+3d

Maine State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-571830
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: 45c9bf3c83a8374650117a30131800d27137c372bba923b8acc80992c360a3cd

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityMILLIMAN, INC.

Victim entityMILLIMAN, INC.

IncidentUnknown

Stated responseEngaged a third-party forensic firm to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov