HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
Pension Benefit Information, LLC
bd_e732ff20c2386d79 · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →Pension Benefit Information, LLC (PBI) disclosed a data breach stemming from the MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, affecting individuals whose full name, SSN, DOB, contract number, and zip code were accessed. PBI patched systems, offered credit monitoring via Kroll, and enhanced security policies. No identity theft was known at the time of notice.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_20a3b8416525341eVermont State AGfiled 2023-07-12(7d gap)Candidate
- bd_4c50415a8827e689Oregon State AGfiled 2023-07-27(8d gap)Candidate
- bd_1885081c1d2bb691Hawaii State AGfiled 2023-07-28(9d gap)Verified
- bd_223e8c30e3bd391dDelaware State AGfiled 2023-07-10(9d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 23d gap
- bd_27f033748566ecf2New Hampshire State AGfiled 2023-08-08(20d gap)Verified
- bd_7bdc23aedd0d2aaaHawaii State AGfiled 2023-08-08(20d gap)Candidate
- bd_7632da10b2361b23New Hampshire State AGfiled 2023-08-11(23d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-07-19-baird-insurance-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2023
- Raw hash
- c22eaa803f2af0104f2031d577fccd1df222c0d3ee958459e89a60463ca7ce3b
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Jul 19, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.