HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
MassMutual Ascend Life Insurance Company (MMAscend); Annuity Investors Life Insurance Company (AILIC); Manhattan National Life Insurance Company (MNL) (Collectively, MMA)
bd_80ce89a868e7f51b · schema v1 · pii pii-v1
Full breach record for MassMutual Ascend Life Insurance Company (MMAscend); Annuity Investors Life Insurance Company (AILIC); Manhattan National Life Insurance Company (MNL) (Collectively, MMA) →Pension Benefit Information (PBI), a third-party service provider for MassMutual Ascend, Annuity Investors, and Manhattan National Life Insurance, experienced a data breach via the MOVEit Transfer software vulnerability. An unauthorized third party accessed PBI's servers on May 29-30, 2023, and downloaded data including names, SSNs, DOBs, gender, zip codes, and policy numbers. PBI patched servers, investigated, and offered 24 months of credit monitoring via Kroll.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-573293
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 14, 2023
- Raw hash
- 7c77a559601211f9bd3ebecbc58f925a01861ff5ef54dcf5f9def923446ab9fd
Reporting entity
- Name
- MassMutual Ascend Life Insurance Company (MMAscend); Annuity Investors Life Insurance Company (AILIC); Manhattan National Life Insurance Company (MNL) (Collectively, MMA)norm: massmutual ascend life insurance company mmascend annuity investors life insurance company ailic manhattan national life insurance company mnl collectively mma
Victim entity
- Name
- MassMutual Ascend Life Insurance Company (MMAscend); Annuity Investors Life Insurance Company (AILIC); Manhattan National Life Insurance Company (MNL) (Collectively, MMA)norm: massmutual ascend life insurance company mmascend annuity investors life insurance company ailic manhattan national life insurance company mnl collectively mma
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.