MILLIMAN, INC.
bd_847189c2c427ed3b · schema v1 · pii pii-v1
Full breach record for MILLIMAN, INC. →5 incidents on fileMilliman, Inc., a provider of administrative services for employee benefit and pension plans, reported a data breach that occurred through a third-party vendor, Pension Benefit Information, LLC (PBI). PBI utilized the MOVEit Transfer software, which contained a zero-day vulnerability (CVE-2023-34362). Between May 29 and May 30, 2023, an unauthorized third party exploited this vulnerability to access and download data from PBI's servers. The breach was discovered on July 21, 2023, and affected personal information, including names and Social Security numbers.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
Jul 21, 2023
Discovered
Aug 14, 2023
Filed
vs. sector median
7 wks faster
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- California State AGbd_5fb2b809a54c9f682023-08-14Verified
- Indiana State AGbd_61914e30e6a7f2e72023-08-14Verified
- Massachusetts State AGbd_6f1acd087e5dc3602023-08-14Verified
- Washington State AGbd_b71e461fa51aa4b22023-08-14Verified
Show 5 more filings ↓Show fewer ↑up to 4d gap
- Oregon State AGbd_c290a9c83b4262b52023-08-14Verified
- Idaho State AGbd_d1cb5766b2805d522023-08-14Verified
- Montana State AGbd_efdfa8d0534820d32023-08-14Verified
- New Hampshire State AGbd_0784ee17d069ca5f2023-08-17 · +3dVerified
- Maine State AGbd_ef7ad7a4aedf79b12023-08-18 · +4dVerified
Filing propagation · 10 filings · 9 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.