DisclosureLens
HackingFinancial ServicesTechnologyFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Government IDHighContained

Pension Benefit Information, LLC

bd_e44dd39c1fbaba36 · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2023

Filed

Jul 26, 2023

To disclose

8 weeks

Affected

1,350state residents only

Linked

6 filings

Confidence

66%

Pension Benefit Information, LLC (PBI), a third-party vendor for Transamerica Life Insurance Company, disclosed that an unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software. The attacker accessed PBI's MOVEit server on May 29-30, 2023, downloading data containing PII and government IDs. PBI patched servers, investigated, and is offering 12 months of credit monitoring. No identity theft was confirmed.

Incident timeline

undetected · 2 days
discovery → filing · 8 weeks / 56 days

May 29, 2023

Begins

May 31, 2023

Discovered

Jul 26, 2023

Filed

vs. sector median

on median

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 15d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Washington State AGJul 12 · first
Montana State AG+14d · this page

Pattern: first filing Jul 12 (WA), last Aug 10 (OR) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.