Vitality Group International, Inc.
bd_6b3a2c4ab1bfdb6d · schema v1 · pii pii-v1
Full breach record for Vitality Group International, Inc. →2 incidents on fileVitality Group International, Inc. experienced a data breach on May 30, 2023, due to a security vulnerability in the third-party MOVEit file transfer program. An unauthorized third party accessed the Vitality server for approximately two hours. The incident potentially exposed names, mailing addresses, dates of birth, email addresses, and Social Security numbers of U.S.-based employees of Brookfield and their partners/spouses. Vitality identified the risk on June 1, 2023, disconnected the server, and initiated forensic investigations. Affected individuals are offered 24 months of credit monitoring via Experian.
J jump to incidentP pin to compareR raw source
Incident timeline
May 30, 2023
Begins
Jun 1, 2023
Discovered
Jun 30, 2023
Filed
vs. sector median
15 wks faster
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Sitecl0pbd_2451cab2b76bdfdc2023-08-31 · +62dVerified by operator
- Leak Sitecl0pbd_d4ef49ef8299ea932023-07-26 · +26dVerified by operator
Regulatory filings (3) · sorted by filing gap
- Vermont State AGbd_e86d30f8d284d89c2023-06-30Verified by operator
- Vermont State AGbd_51ffc537e3fe379a2023-06-28 · +2dVerified by operator
- Montana State AGbd_eb3a6c4d872f2c2a2023-06-26 · +4dCandidate
Filing propagation · 4 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.