UnknownGovernment IDMedium

MILLIMAN, INC.

bd_6f1acd087e5dc360 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 14, 2023

To disclose

—

Affected

707state residents only

Linked

10 filings

Confidence

95%

Full breach record for MILLIMAN, INC. →5 incidents on file

Milliman, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-14. 707 Massachusetts residents were affected. The report records the breach type as electronic.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Aug 14, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 filings about the same incident.View merged incident

Part of Pension Benefit Information, LLC supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_5fb2b809a54c9f682023-08-14Verified
Indiana State AGbd_61914e30e6a7f2e72023-08-14Verified
Maine State AGbd_847189c2c427ed3b2023-08-14Candidate
Washington State AGbd_b71e461fa51aa4b22023-08-14Verified

Show 5 more filings ↓up to 4d gap

Oregon State AGbd_c290a9c83b4262b52023-08-14Verified
Idaho State AGbd_d1cb5766b2805d522023-08-14Verified
Montana State AGbd_efdfa8d0534820d32023-08-14Verified
New Hampshire State AGbd_0784ee17d069ca5f2023-08-17 · +3dVerified
Maine State AGbd_ef7ad7a4aedf79b12023-08-18 · +4dVerified

Name: MILLIMAN, INC.
norm: milliman
Domain: us.milliman.com

Name: MILLIMAN, INC.
norm: milliman
Domain: us.milliman.com

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 707state-resident count only
Data types: Government ID
Data elements: Social Security number
Stated not affected: Financial account numberDriver's licence numberPayment card number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

California State AGAug 14 · first

Indiana State AGAug 14 · first

Maine State AGAug 14 · first

Washington State AGAug 14 · first

Oregon State AGAug 14 · first

Idaho State AGAug 14 · first

Montana State AGAug 14 · first

Massachusetts State AGAug 14 · first · this page

New Hampshire State AG+3d

Maine State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2023/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: aea422c04384e7a645e2d0c7e934bbba5f5d87bde130a704edb3c8d1a01abe96

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityMILLIMAN, INC.

Victim entityMILLIMAN, INC.

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov