HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
F&G Annuities & Life, Inc.
bd_884c84b324ce7c50 · schema v1 · pii pii-v1
Full breach record for F&G Annuities & Life, Inc. →Pension Benefit Information (PBI), a third-party service provider for F&G Annuities & Life, experienced a data breach due to a vulnerability in Progress Software's MOVEit Transfer. An unauthorized third party accessed PBI's server on May 29-30, 2023, and downloaded data including names and other personal information. PBI patched servers, investigated the incident, and is offering 12 months of credit monitoring to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-570974
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2023
- Raw hash
- 717ed2afc0748fdf4b0d469ba5201f7a6eab990b169a6daa31bf7ff384474a62
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- F&G Annuities & Life, Inc.norm: f g annuities life
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.