HackingVulnerability ExploitData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Pension Benefit Information, LLC
bd_79b9877e3d948300 · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →New Hampshire Attorney General notice regarding a data security event involving Pension Benefit Information, LLC (PBI), a vendor used by PNC Bank. PBI's MOVEit Transfer software was exploited via a zero-day vulnerability, leading to unauthorized access to annuitant data (name, DOB, SSN, state/zip) for 4 New Hampshire residents. PBI remediated the vulnerability, engaged forensic investigators, and offered credit monitoring services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a6e5644826fd8b21New Hampshire State AGfiled 2023-09-26(2d gap)Verified
- bd_bcad68278694b2a2Idaho State AGfiled 2023-09-12(16d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/progress-software-corporation-20230928.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 28, 2023
- Raw hash
- 6a33ed49802e60223dca7afd650d0cc8e68ba4faa4754fc44cb7bf010b827dcb
Reporting entity
- Name
- CONSUMER REPORTS, INC.norm: consumer reports
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- Jul 24, 2023
- Materiality determined
- —
- Notification sent
- Aug 18, 2023
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.