Milliman Solutions LLC
bd_a000c0cf3a8e0660 · schema v1 · pii pii-v1
Full breach record for Milliman Solutions LLC →Pension Benefit Information, LLC (PBI), a provider of audit and address research services for insurance companies and pension funds, experienced a data breach via a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data containing consumer information. PBI discovered the vulnerability on May 31, 2023, when Progress Software disclosed it. PBI patched servers, investigated the scope, and is offering 12 months of identity monitoring through Kroll to affected individuals. The incident is contained.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_24ccb026f721af63Oregon State AGfiled 2023-07-17Candidate
- bd_8674a4bac38b2e61Maine State AGfiled 2023-07-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-570417
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2023
- Raw hash
- e063c9b5a4976b872dcc008b1f9860c57de7ba4822c6c809283f876727aefc2c
Reporting entity
- Name
- Milliman Solutions LLCnorm: milliman solutions
- Domain
- milliman.com
Victim entity
- Name
- Milliman Solutions LLCnorm: milliman solutions
- Domain
- milliman.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.