HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
FIDELITY & GUARANTY LIFE INSURANCE COMPANY
bd_b4ad819409c0eec1 · schema v1 · pii pii-v1
Full breach record for FIDELITY & GUARANTY LIFE INSURANCE COMPANY →Pension Benefit Information, LLC (PBI) disclosed a third-party software event involving MOVEit Transfer software exploited by an unauthorized third party on May 29-30, 2023. The incident affected data for Fidelity and Guaranty Life Insurance Company clients, including names and other identifiers. PBI patched servers, investigated, and offered 12 months of credit monitoring via Kroll. No identity theft or fraud has been indicated.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_92cedaacf40b2902Idaho State AGfiled 2023-07-28(4d gap)Candidate
- bd_95a07b61fb5e43d3Montana State AGfiled 2023-07-28(4d gap)Verified
- bd_5465b86396891a46Maine State AGfiled 2023-07-20(12d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/08/PBI-Adult-Consumer-Letter-12-mths.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 1, 2023
- Raw hash
- 1dd823754ebd2458aa7b7dbd10c801c547a1c83880671d807b0d586eeadad7ff
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- FIDELITY & GUARANTY LIFE INSURANCE COMPANYnorm: fidelity guaranty life insurance
- Domain
- fglife.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.