HackingVulnerability ExploitData ExfiltratedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Pension Benefit Information, LLC
bd_eb47f1a922c8d8dd · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →Pension Benefit Information, LLC (PBI) disclosed a cybersecurity incident involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The attacker accessed PBI servers on May 29-30, 2023, and downloaded data. PBI confirmed that consumer information, including names and government identifiers, was involved. PBI patched servers, enhanced security policies, and offered 12 months of identity monitoring via Kroll. No identity theft or fraud has been identified.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_729ad9694adf695eNew Hampshire State AGfiled 2023-07-14(3d gap)Verified
- bd_8a9b6ba4c65dda36Delaware State AGfiled 2023-07-28(11d gap)Candidate
- bd_bc42d7fee9bd036cMaine State AGfiled 2023-08-16(30d gap)Candidate
- bd_5a81a9b3803e493cDelaware State AGfiled 2023-08-23(37d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 39d gap
- bd_31eb3a86b455ca2aCalifornia State AGfiled 2023-08-24(38d gap)Verified
- bd_88a232a96ae8d0e9New Hampshire State AGfiled 2023-08-24(38d gap)Verified
- bd_f52c76855c9e670bNew Hampshire State AGfiled 2023-08-24(38d gap)Verified
- bd_ed5751101a0d93eeVermont State AGfiled 2023-08-25(39d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/07/Milliman-Solutions-Inc-PBI-Sample-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2023
- Raw hash
- b0b37a87e6ae9eaae4728a39370c0ebfaa5a088b28d125336073ecb835bfa2c9
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Jul 16, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.