HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Pension Benefit Information, LLC
bd_729ad9694adf695e · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →Pension Benefit Information, LLC (PBI) disclosed that an unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software to access PBI servers on May 29-30, 2023 and download data. PBI, a third-party service provider for insurers including Talcott Resolution, notified affected individuals and offered 12 months of credit monitoring. PBI patched servers and enhanced security policies.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_eb47f1a922c8d8ddDelaware State AGfiled 2023-07-17(3d gap)Candidate
- bd_8a9b6ba4c65dda36Delaware State AGfiled 2023-07-28(14d gap)Candidate
- bd_bc42d7fee9bd036cMaine State AGfiled 2023-08-16(33d gap)Candidate
- bd_5a81a9b3803e493cDelaware State AGfiled 2023-08-23(40d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 42d gap
- bd_31eb3a86b455ca2aCalifornia State AGfiled 2023-08-24(41d gap)Verified
- bd_88a232a96ae8d0e9New Hampshire State AGfiled 2023-08-24(41d gap)Verified
- bd_f52c76855c9e670bNew Hampshire State AGfiled 2023-08-24(41d gap)Verified
- bd_ed5751101a0d93eeVermont State AGfiled 2023-08-25(42d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/talcott-resolution-life-annuity-insurance-company-20230714.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 14, 2023
- Raw hash
- c7a80a0933c97bc60d2cabe86d401ad59a7cd2b31ef1b15016b51e0fc1a54b11
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified our primary insurance regulators beginning June 8continue to notify and update other regulators
- Third party
- via Pension Benefit Information, LLC
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.