DisclosureLens
HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

The Global Atlantic Financial Group LLC

bd_d6b173a65da2adf5 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 7, 2023

Filed

Jul 28, 2023

To disclose

7 weeks

Affected

62,433state residents only

Linked

5 filings

Confidence

70%
Full breach record for The Global Atlantic Financial Group LLC →7 incidents on file

The Global Atlantic Financial Group LLC reported a breach involving third-party vendor Pension Benefits Information LLC (PBI). Cyber criminals exploited a vulnerability in MOVEit file transfer software to access data on May 29-30, 2023. Global Atlantic was notified on June 7, 2023. The incident impacted policyholder data including names and government IDs. 62,433 Washington residents were affected. Notices were sent on July 28, 2023, offering credit monitoring.

Washington clock⏱ WA AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 9 days
discovery → filing · 7 weeks / 51 days

May 29, 2023

Begins

Jun 7, 2023

Discovered

Jul 28, 2023

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident
Part of Pension Benefit Information, LLC supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGJul 28 · first
Washington State AGJul 28 · first · this page
Oregon State AG+11d
Massachusetts State AG+11d
Hawaii State AG+48d

Pattern: first filing Jul 28 (IN), last Sep 14 (HI) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.