Vitality Group International, Inc.

Vitality Group International, Inc. experienced a data breach on May 30, 2023, due to a security vulnerability in the third-party MOVEit file transfer program. An unauthorized third party accessed the Vitality server for approximately two hours. The incident potentially exposed names, mailing addresses, dates of birth, email addresses, and Social Security numbers of U.S.-based employees of Brookfield and their partners/spouses. Vitality identified the risk on June 1, 2023, disconnected the server, and initiated forensic investigations. Affected individuals are offered 24 months of credit monitoring via Experian.