TIAA Kaspick, LLC
bd_b82d3fc6babe68a1 · schema v1 · pii pii-v1
Full breach record for TIAA Kaspick, LLC →TIAA Kaspick, LLC notified the California AG of a data breach involving its third-party vendor, Pension Benefit Information (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer product to access PBI's servers on May 29-30, 2023, and exfiltrated data. Affected individuals' name, Social Security number, and date of birth were involved. PBI patched servers, investigated the incident, and offered 24 months of identity monitoring through Kroll.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
May 31, 2023
Discovered
Jul 27, 2023
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Maine State AGbd_05f642e9efff15cc2023-07-27Verified
- Idaho State AGbd_fa66956c081fbea72023-07-27Verified
- Washington State AGbd_27e08831a02007b62023-07-28 · +1dVerified by operator
- New Hampshire State AGbd_8ae2f91c9a2c0c122023-07-26 · +1dVerified
Show 3 more filings ↓Show fewer ↑up to 13d gap
- Montana State AGbd_f2b549864eb15db82023-07-26 · +1dCandidate
- Massachusetts State AGbd_7ab15396154faaa52023-07-17 · +10dVerified by operator
- Indiana State AGbd_52169e34f1cf02cf2023-07-14 · +13dVerified by operator
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jul 14 (IN), last Jul 28 (WA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.