HackingVulnerability ExploitData ExfiltratedN-DaySupply Chain (3P Vendor)IDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Pension Benefit Information, LLC
bd_ed5751101a0d93ee · schema v1 · pii pii-v1
Full breach record for Pension Benefit Information, LLC →Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server, exploited via a vulnerability in Progress Software's MOVEit Transfer product. The incident occurred May 29-30, 2023. Data accessed included names and financial account numbers. PBI patched servers, engaged in investigation, and offered complimentary identity monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_31eb3a86b455ca2aCalifornia State AGfiled 2023-08-24(1d gap)Verified
- bd_88a232a96ae8d0e9New Hampshire State AGfiled 2023-08-24(1d gap)Verified
- bd_f52c76855c9e670bNew Hampshire State AGfiled 2023-08-24(1d gap)Verified
- bd_5a81a9b3803e493cDelaware State AGfiled 2023-08-23(2d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 42d gap
- bd_bc42d7fee9bd036cMaine State AGfiled 2023-08-16(9d gap)Candidate
- bd_8a9b6ba4c65dda36Delaware State AGfiled 2023-07-28(28d gap)Candidate
- bd_eb47f1a922c8d8ddDelaware State AGfiled 2023-07-17(39d gap)Candidate
- bd_729ad9694adf695eNew Hampshire State AGfiled 2023-07-14(42d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-25-arctic-wolf-networks-pension-benefit-information-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2023
- Raw hash
- b63f94860ff6b72573ffbe97b3ba55c47a3fe35f85c93a2e654febb1a87039f9
Reporting entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Victim entity
- Name
- Pension Benefit Information, LLCnorm: pension benefit information
- Domain
- mypensionbenefitinformation.com
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Aug 25, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.