The Global Atlantic Financial Group LLC
bd_996dba95423b3558 · schema v1 · pii pii-v1
Full breach record for The Global Atlantic Financial Group LLC →7 incidents on fileThe Global Atlantic Financial Group LLC (GAFG) disclosed a cybersecurity incident involving its third-party vendor, Pension Benefits Information LLC (PBI). PBI's MOVEit file transfer application was exploited via an unpatched vulnerability (zero-day at the time) between May 29-30, 2023. Cybercriminals exfiltrated policyholder data, including names and government identifiers (SSNs, DOBs). GAFG notified affected individuals in July 2023, offering two years of credit monitoring. GAFG stated its own environment was not directly compromised.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
May 31, 2023
Discovered
Jul 28, 2023
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- California State AGbd_2fd32b32e3e188182023-08-14 · +17dVerified
Filing propagation · 2 filings · 2 states
View merged incident ↗Pattern: first filing Jul 28 (DE), last Aug 14 (CA) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.