AETNA LIFE INSURANCE COMPANY

Aetna Life Insurance Company reported a cybersecurity incident occurring on May 29, 2023, discovered on June 6, 2023. The breach involved unauthorized access via a software vulnerability in an external system. Approximately 310,019 individuals were affected, including 1,017 Maine residents. The incident compromised names and Social Security Numbers. Aetna notified affected individuals in writing starting September 14, 2023, and offered 12 months of credit monitoring and identity restoration services through Kroll.

Aetna Life Insurance Company reported a security incident involving its third-party vendor, Pension Benefits, LLC (dba PBI Research Services). The breach impacted 1,008 Idaho residents. Aetna notified the Idaho Attorney General and sent notices to the affected individuals.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving MOVEit Transfer software exploited by an unauthorized third party on May 29-30, 2023. The incident affected data belonging to clients, including Aetna Life Insurance. PBI patched servers, investigated, and offered 12 months of credit monitoring. Data potentially exposed included names and government identifiers.

Aetna Life Insurance Company reported a data breach affecting 970 Maine residents. The breach was discovered on June 6, 2023, and occurred on May 29, 2023. The incident was an external system breach due to a software vulnerability, resulting in the compromise of names and Social Security numbers. Aetna offered 12 months of credit monitoring and identity restoration services to affected individuals.

Aetna Life Insurance Company notified the Idaho Attorney General of a security incident involving its third-party vendor, Pension Benefits Information (PBI). PBI's MOVEit Transfer server was exploited, impacting 903 Idaho residents. Data included names, SSNs, and DOBs. PBI engaged Kroll for forensics and offered credit monitoring.

Aetna Life Insurance Company, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-06 and filed notice on 2023-09-08. 2,303 Washington residents were affected. 94 days elapsed between awareness and notification. 8 days to identify the breach. 116 days to contain the breach.

Aetna Life Insurance Company reported a data breach to the Montana Attorney General. The breach was reported on 2023-09-07. The breach occurred from 5/29/2023 to 5/30/2023. 831 Montana residents were affected.

Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. The compromised information included names and other basic identity data. PBI patched servers, investigated the incident, and is offering 12 months of credit monitoring and identity restoration services via Kroll to affected individuals. This was a supply-chain attack via a third-party vendor.