HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Pension Benefit Information, LLC
bd_a048e13b565b1727 · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →Pension Benefit Information, LLC reported a third-party system breach involving MOVEit Transfer occurring May 29-30, 2023, discovered June 2, 2023. The incident affected 82,955 individuals, including 130 Maine residents. Acquired data included names and Social Security Numbers. The company provided 12 months of credit monitoring and identity theft restoration services to affected individuals.
Maine clockDiscovered Jun 2, 2023 → Filed with AG Aug 4, 202363d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 40 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_1740e31b7167fe7dVermont State AGfiled 2023-08-16(12d gap)Verified
- bd_2b476a800589524eDelaware State AGfiled 2023-08-16(12d gap)Verified
- bd_a82b696d6cce10e6Vermont State AGfiled 2023-08-18(14d gap)Verified
- bd_6c08967123b07af5Vermont State AGfiled 2023-08-23(19d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 46d gap
- bd_00fe2e9a4aff5280Vermont State AGfiled 2023-08-24(20d gap)Verified
- bd_07101c97c9594fc4Maine State AGfiled 2023-08-24(20d gap)Verified
- bd_90bb6fe25069dbd5Vermont State AGfiled 2023-08-24(20d gap)Verified
- bd_ccca38986587393cCalifornia State AGfiled 2023-08-24(20d gap)Verified
- bd_a8e1e642699a092dCalifornia State AGfiled 2023-09-01(28d gap)Verified
- bd_83b0b7e92e935f83California State AGfiled 2023-09-19(46d gap)Verified
Showing first 10 of 39 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bbbea196-aeeb-4276-8000-fcffe5747613.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2023
- Raw hash
- cc10e2a21f0ae89fbdfc7e5acbcd150a4fe8d955c92854dcb38009f3c103decc
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- Jun 2, 2023
- Materiality determined
- —
- Notification sent
- Aug 16, 2023
- Affected individuals
- 82,955
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Third party
- via MOVEit Transfer
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- ME AG >30d · 63dME resident >60d · 75d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 2, 2023→ Filed with AG: Aug 4, 202363d 30 days (soft) ME AG >30d Maine Discovered: Jun 2, 2023→ Notified: Aug 16, 202375d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.