WILLIS TOWERS WATSON US LLC
bd_8b25fc06c7db34e9 · schema v1 · pii pii-v1
Full breach record for WILLIS TOWERS WATSON US LLC →Willis Towers Watson US LLC and its affiliate Acclaris, Inc. reported a data breach affecting 4 Maine residents. The breach originated with a third-party vendor, Pension Benefit Information, LLC (PBI), which uses the MOVEit Transfer software. A zero-day vulnerability in MOVEit was exploited by a threat actor between May 29 and May 30, 2023, leading to data exfiltration. The compromised information includes names and Social Security numbers. The breach was discovered on June 22, 2023, and affected individuals were notified on August 10, 2023, with an offer of 24 months of identity monitoring services from Kroll.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ce89ac8f49ebd4c0Montana State AGfiled 2023-08-04(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/457e3628-ebfb-4476-95f6-779315f871d4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 8, 2023
- Raw hash
- b7ebfbf0315834456e24c8cc94f4f7e784d28b88163f17ba90976dae150fa1c2
Reporting entity
- Name
- WILLIS TOWERS WATSON US LLCnorm: willis towers watson us
Victim entity
- Name
- WILLIS TOWERS WATSON US LLCnorm: willis towers watson us
Incident
- Discovered
- Jun 22, 2023
- Materiality determined
- —
- Notification sent
- Aug 10, 2023
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- ME AG >30d · 47d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 22, 2023→ Filed with AG: Aug 8, 202347d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.