WILTON REASSURANCE COMPANY

Wilton Reassurance Company reported a data breach affecting 2,232 Maine residents, stemming from a vulnerability in the MOVEit Transfer tool used by its third-party service provider, PBI Research Services. The breach, which occurred in May 2023, resulted in the compromise of names and Social Security numbers.

Wilton Reassurance Company reported a cybersecurity event involving its third-party vendor, PBI Research Services. A cybercriminal group known as CL0P exploited a zero-day vulnerability in MOVEit Transfer software between May 29-30, 2023, to exfiltrate consumer personal information. The incident affected 2,013 New Hampshire residents, whose data included names, addresses, and Social Security numbers. PBI notified affected individuals and offered credit monitoring services. The incident is considered resolved.

Wilton Reassurance Company notified the California AG of a data breach affecting its customers. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software, accessing PBI's servers on May 29-30, 2023, and downloading data. PBI discovered the vulnerability on May 31, 2023. Affected data includes identity information. PBI patched servers, investigated, and offered 12 months of credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) notified Montana residents of a data breach involving the MOVEit Transfer software vulnerability. An unauthorized third party accessed a PBI server on May 29-30, 2023, downloading personal information. PBI patched servers, investigated, and is offering 12 months of credit monitoring.

Wilton Reassurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-10. 104,027 Indiana residents were affected. 1,433,939 individuals affected in total.

Wilton Reassurance Company notified SC DCA of a third-party data breach involving vendor PBI Research Services. Attackers exploited MOVEit vulnerability CVE-2023-34362 (attributed to CLOP group) to exfiltrate consumer PII including names, DOBs, SSNs, and policy numbers. 16,163 SC residents potentially affected. Incident discovered June 7, 2023. Credit monitoring offered.

Wilton Reassurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-23. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/7/2023. 1,482,490 individuals were affected. Notice was sent on 6/23/2023.

Wilton Reassurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-23. 8,430 Massachusetts residents were affected. The report records the breach type as electronic.

Wilton Reassurance Company reported a supplemental breach involving its vendor, PBI Research Services. The CL0P group exploited a zero-day vulnerability (CVE-2023-34362) in MOVEit Transfer software between May 29-30, 2023, exfiltrating customer PII including names, DOBs, SSNs, and policy numbers. 8,148 Washington residents were notified starting July 25, 2023. The incident is resolved.

Wilton Reassurance Company reported a data security breach to the California Attorney General. The incident occurred between May 29, 2023, and May 30, 2023. The filing provides only the organization name and breach dates; no details regarding the nature of the breach, data types affected, or number of individuals impacted are disclosed in this record.

WILTON REASSURANCE CO. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-414). The register records the breach as discovered on June 7, 2023. Additional entities named: MOVEIT, PBI. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Wilton Reassurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-07-08. 714 Massachusetts residents were affected. The report records the breach type as electronic.