HackingFinancial ServicesHealthcareFinanceVulnerability ExploitCapture Stored DataCL0PZero-DaySupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDownstream VictimsBusiness Associate (HIPAA)Identity (basic)Government IDHighResolved

TALCOTT RESOLUTION LIFE INSURANCE COMPANY

bd_7eb5a317800d59e0 · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2023

Filed

Aug 1, 2023

To disclose

9 weeks

Affected

2,032state residents only

Linked

9 filings

Confidence

66%

Full breach record for TALCOTT RESOLUTION LIFE INSURANCE COMPANY →4 incidents on file

Talcott Resolution Life Insurance Company reports a supplemental data breach involving its third-party vendor, PBI Research Services. The CL0P cybercriminal group exploited a zero-day vulnerability in MOVEit Transfer software to access and download customer data (SSN, DOB, name) on May 29-30, 2023. PBI notified 2,032 New Hampshire residents on July 19, 2023, offering credit monitoring. The incident is resolved.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 9 weeks / 62 days

May 29, 2023

Begins

May 31, 2023

Discovered

Aug 1, 2023

Filed

vs. sector median

1 wks faster

This filing is one of 9 filings about the same incident.View merged incident

Part of Pension Benefit Information, LLC supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_eca292e37aaf4cbb2023-07-25 · +7dVerified
Montana State AGbd_eced2b5c5a3a60f52023-07-18 · +14dVerified
Indiana State AGbd_7bd62d94c616b5872023-07-10 · +22dVerified
Washington State AGCL0Pbd_aba190fcbb817b312023-06-28 · +34dVerified

Show 4 more filings ↓up to 35d gap

Massachusetts State AGbd_c5c4d8d4a7f415ac2023-06-28 · +34dVerified
Massachusetts State AGbd_10f404ece672e13b2023-06-27 · +35dVerified
California State AGbd_3587cc17d4719a402023-06-27 · +35dCandidate
Oregon State AGbd_9d9397e4ee2274822023-06-27 · +35dVerified

Name: TALCOTT RESOLUTION LIFE INSURANCE COMPANY
norm: talcott resolution life insurance

Name: TALCOTT RESOLUTION LIFE INSURANCE COMPANY
norm: talcott resolution life insurance
Industry: Financial ServicesllmHealthcarellm

Discovered: May 31, 2023
Breach occurred: May 29, 2023 – May 30, 2023
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 19, 2023
Affected individuals: 2,032state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain· CL0P
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: CL0PExternalFinancial
Regulator citations: Talcott Resolution previously notified your office of a cybersecurity eventTalcott Resolution is providing you with an update
Third party: via PBI Research Services
Initial access: exploit_public_facing

During the incident: PBI promptly launched an investigation into the nature and scope of the MOVEit vulnerability’s impact on our systems
PBI conducted a manual review of our records to confirm the identities of individuals potentially affected
PBI mailed a total of 2,032 written notifications and offers of complimentary identity theft protection and credit monitoring to New Hampshire residents beginning July 19
PBI is offering you access to 12 months of complimentary credit monitoring and identity restoration services through Kroll
Changes made: Took steps to patch servers
Assess the security of our systems
Reviewing and enhancing our information security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Massachusetts State AGJun 27 · first

California State AGJun 27 · first

Oregon State AGJun 27 · first

Washington State AG+1d

Massachusetts State AG+1d

Indiana State AG+13d

Montana State AG+21d

Maine State AG+28d

New Hampshire State AG+35d · this page

Pattern: first filing Jun 27 (MA), last Aug 1 (NH) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/talcott-resolution-life-insurance-20230801.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2023
Raw hash: 4292116b128af239ab8aef09c5c849f34d63c67be5f080e819664bce644f2f0f

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityTALCOTT RESOLUTION LIFE INSURANCE COMPANY

Victim entityTALCOTT RESOLUTION LIFE INSURANCE COMPANY

Incidentdiscovered May 31, 2023

Stated responsePBI promptly launched an investigation into the nature and scope of the MOVEit vulnerability’s impact on our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov