TIAA Kaspick, LLC
bd_8ae2f91c9a2c0c12 · schema v1 · pii pii-v1
Full breach record for TIAA Kaspick, LLC →TIAA Kaspick, LLC notified the NH Attorney General of a data security incident involving its third-party vendor, Pension Benefit Information, LLC (PBI). PBI's MOVEit Transfer server was exploited by an unauthorized third party on May 29-30, 2023, resulting in the exfiltration of files containing personal information of 353 New Hampshire residents. TIAA Kaspick learned of the investigation on June 9, 2023. Notifications were mailed starting July 14, 2023, offering credit monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
Jun 9, 2023
Discovered
Jul 26, 2023
Filed
vs. sector median
1 wks faster
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Montana State AGbd_f2b549864eb15db82023-07-26Candidate
- Maine State AGbd_05f642e9efff15cc2023-07-27 · +1dVerified
- California State AGbd_b82d3fc6babe68a12023-07-27 · +1dVerified
- Idaho State AGbd_fa66956c081fbea72023-07-27 · +1dVerified
Show 3 more filings ↓Show fewer ↑up to 12d gap
- Washington State AGbd_27e08831a02007b62023-07-28 · +2dVerified by operator
- Massachusetts State AGbd_7ab15396154faaa52023-07-17 · +9dVerified by operator
- Indiana State AGbd_52169e34f1cf02cf2023-07-14 · +12dVerified by operator
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jul 14 (IN), last Jul 28 (WA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.