TALCOTT RESOLUTION LIFE INSURANCE COMPANY

Talcott Resolution Life Insurance Company reports a supplemental data breach involving its third-party vendor, PBI Research Services. The CL0P cybercriminal group exploited a zero-day vulnerability in MOVEit Transfer software to access and download customer data (SSN, DOB, name) on May 29-30, 2023. PBI notified 2,032 New Hampshire residents on July 19, 2023, offering credit monitoring. The incident is resolved.

Talcott Resolution Life Insurance Company notified the South Carolina Attorney General on June 26, 2023, of a data security event involving its vendor, PBI Research Services. Attackers believed to be the CLOP group exploited the MOVEit vulnerability (CVE-2023-34362) to exfiltrate data. Approximately 11,675 South Carolina residents were affected. Data likely included names, dates of birth, Social Security Numbers, and policy numbers. Talcott is offering credit monitoring and identity theft protection.

Talcott Resolution Life Insurance Company reported a data breach affecting 557,741 individuals, stemming from a security vulnerability in the MOVEit Transfer tool used by a third-party service provider, PBI Research Services. The incident, which occurred between May 29 and May 30, 2023, resulted in the unauthorized acquisition of names and Social Security numbers. The breach was discovered on June 4, 2023, and affected individuals were notified on July 19, 2023. The company is offering 12 months of complimentary identity theft protection and credit monitoring services through Kroll.

Pension Benefit Information, LLC (PBI) notified Montana residents of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party on May 29-30, 2023. PBI confirmed that full names, Social Security Numbers, and dates of birth were accessed. PBI patched servers, conducted an investigation, and is offering 12 months of credit monitoring. No identity theft or fraud has been identified to date.

Talcott Resolution Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-10. 9,853 Indiana residents were affected. 316,041 individuals affected in total.

Talcott Resolution Life Insurance Company reported a third-party vendor breach involving PBI Research Services. The CL0P group exploited a zero-day vulnerability (CVE-2023-34362) in MOVEit Transfer to exfiltrate customer PII (name, DOB, SSN, policy number) from May 29-30, 2023. Talcott was notified on June 4, 2023. 12,525 Washington residents were affected. Notifications were sent July 19, 2023. Incident is resolved.

Talcott Resolution Life Insurance Company reported a breach affecting 9,832 Massachusetts residents. The incident involved a third-party software event at Pension Benefit Information, LLC (PBI), a service provider. Affected data included full name, Social Security Number, and date of birth. PBI offered 24 months of credit monitoring and identity restoration services through Kroll. No identity theft or fraud was indicated at the time of notice.

Talcott Resolution Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-27. 10,168 Massachusetts residents were affected. The report records the breach type as electronic.

Talcott Resolution Life Insurance Company reported a data breach to the California Attorney General. The incident occurred between May 29, 2023, and May 30, 2023. The filing provides only the occurrence dates and organization name; no details regarding the nature of the breach, data types affected, number of individuals impacted, or response actions are included in this sample record.

Talcott Resolution Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-27. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/4/2023. 552,821 individuals were affected. Notice was sent on 6/27/2023.

TALCOTT RESOLUTION LIFE INS. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-491). The register records the breach as discovered on May 29, 2023. Additional entities named: MOVEIT, PBI. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

TALCOTT RESOLUTION LIFE INS. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-421). The register records the breach as discovered on May 30, 2023. Additional entities named: MOVEIT, PBI. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.