Pension Benefit Information, LLC

Pension Benefit Information, LLC (PBI) notified the Delaware Attorney General of a security event involving approximately 1,604 Delaware residents. A threat actor exploited a zero-day vulnerability in Progress Software's MOVEit Transfer software to access PBI's servers on May 29-30, 2023, and exfiltrated data including names, partial addresses, Social Security numbers, and dates of birth. PBI patched the vulnerability, engaged third-party cybersecurity specialists, and offered two years of credit monitoring through Kroll. Notification to affected individuals began July 12, 2023.