Fidelity Investments
bd_df8e3cef6e0c8ce2 · schema v1 · pii pii-v1
Full breach record for Fidelity Investments →99 incidents on filePension Benefit Information, LLC (PBI) notified the New Hampshire AG of a security event involving its MOVEit Transfer server. A threat actor exploited a zero-day vulnerability in MOVEit Transfer software to access PBI's server on May 29-30, 2023, and exfiltrated data. PBI discovered the vulnerability upon public disclosure by Progress Software in late May 2023 and began patching on June 2. The breach affected approximately 2,114 New Hampshire residents, whose personal information (including names, SSNs, DOBs, and addresses) was downloaded. PBI engaged forensic specialists, offered two years of credit monitoring via Kroll, and notified regulators and consumer reporting agencies.
J jump to incidentP pin to compareR raw source
Incident timeline
May 29, 2023
Begins
Jul 17, 2023
Filed
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Vermont State AGbd_20a3b8416525341e2023-07-12 · +5dVerified
- California State AGbd_1d33308f5e9a50c02023-07-11 · +6dVerified
- Delaware State AGbd_223e8c30e3bd391d2023-07-10 · +7dCandidate
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Jul 10 (DE), last Jul 17 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.