AMERICAN NATIONAL GROUP INC.

American National Group, LLC, an insurance provider, disclosed a data security incident involving its MOVEit Transfer application. An unauthorized third party exploited a previously unknown vulnerability (CVE-2023-34362) to access systems and exfiltrate customer data, including names, SSNs, DOBs, addresses, and medical treatment information. The breach occurred on May 28, 2023. American National took the application offline, engaged third-party advisors, and notified law enforcement. Affected individuals were offered two years of complimentary credit monitoring through Experian.