ENSTAR (US) INC.

Allianz Global Risks U.S. Insurance Company notified the NH AG of a data breach affecting its third-party vendor, Enstar (US) Inc. Enstar suffered a security incident on May 31, 2023, due to an exploited zero-day vulnerability in MOVEit file transfer software. Unauthorized access occurred May 29-31, 2023, resulting in data exfiltration. Allianz learned of the incident on November 21, 2023, after Enstar notified its administrator, AZRA. Affected data includes PII such as names and government IDs. Enstar provided credit monitoring via Experian.

Enstar (US) Inc. disclosed that an unauthorized actor, identified as the criminal group CL0P, exploited a zero-day vulnerability in the MOVEit Transfer tool (provided by Progress Software Corp.) to access its server between May 29 and May 31, 2023. The actor exfiltrated data, including names and other personal information. Enstar launched an investigation with third-party forensic specialists, reported the incident to law enforcement, and is offering 24 months of credit monitoring and identity theft restoration services to affected individuals. The incident was discovered on May 31, 2023, when Progress Software publicly disclosed the vulnerability.

Enstar (US) Inc. notified Vermont AG of a data breach involving the MOVEit Transfer zero-day vulnerability exploited by the CL0P criminal group. The incident occurred May 29-31, 2023. Enstar engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring. Data accessed included names and other elements.

Enstar (US), Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-05-03. The breach occurred during 5/30/2023 - 5/31/2023. The breach was discovered on 10/21/2023. 75,101 individuals were affected. Notice was sent on 11/20/202312/19/20235/3/2024.

Enstar (US) Inc filed a supplemental data breach notification with the California Attorney General. The incident occurred between May 30 and May 31, 2023. The notice offers 24 months of credit monitoring via Experian. Specific data types and affected counts are not detailed in the provided excerpts, though identity and financial data are implied by the remediation offer. The filing covers residents of multiple states including CA, RI, DC, MD, NM, NY, and NC.

Enstar US Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a data event affecting individuals in multiple states. The incident, occurring in June 2023, involved unauthorized access to personal information including names, addresses, and Social Security numbers. Enstar notified the FBI, offered 24 months of credit monitoring via Experian, and implemented additional security safeguards.

Enstar (US), Inc. reported an external system breach that occurred on May 30, 2023, and was discovered on October 21, 2023. The breach affected 88 Maine residents, compromising names and driver's license or non-driver identification card numbers. Enstar is offering 24 months of credit monitoring and identity theft restoration services to affected individuals.

Enstar (US) Inc filed a supplemental data breach notification with the California Attorney General. The incident occurred between May 29 and May 31, 2023. The notice affects residents of California, Rhode Island, and other states. Social Security numbers and other personal information were potentially compromised. The company is offering 24 months of credit monitoring and identity restoration services through Experian. The specific cause of the breach and the total number of affected individuals are not detailed in the provided excerpts.

Enstar (US) Inc. notified consumers of a data breach involving its MOVEit Transfer server. The criminal group CL0P exploited a zero-day vulnerability (May 29-31, 2023) to exfiltrate data. Affected data included names and other elements. Enstar engaged forensic specialists, reported to law enforcement, and offered 24 months of credit monitoring. Rhode Island residents were explicitly identified as impacted.

Enstar (US) Inc. disclosed a data breach resulting from the exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer tool by the CL0P criminal group. The incident occurred between May 29 and May 31, 2023. The breach exposed personal information including names and government identifiers. Enstar engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring. 103 Rhode Island residents were explicitly identified as affected.

Enstar (US) Inc. experienced an external system breach on May 29, 2023, which was discovered on October 21, 2023. The breach affected 69 Maine residents and compromised names and driver's license or non-driver identification card numbers. The company began notifying affected individuals on November 20, 2023, and offered 24 months of complimentary credit monitoring and identity theft restoration services through Experian.

Enstar US Inc. notified 105 New Hampshire residents on November 20, 2023, of a cybersecurity incident involving unauthorized access to personal information. The company engaged the FBI, implemented additional safeguards, and provided complimentary Experian credit monitoring services to affected individuals. The specific nature of the initial access vector was not detailed in the filing.

Enstar (US) Inc. notified individuals of a data breach involving the MOVEit Transfer zero-day vulnerability exploited by the CL0P criminal group. Unauthorized access occurred between May 29 and May 31, 2023, resulting in data exfiltration. The breach affected individuals across multiple jurisdictions, including 103 Rhode Island residents. Enstar engaged forensic specialists, reported to law enforcement, and offered 24 months of credit monitoring.

Enstar (US) Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2023-11-20. The breach occurred from 5/29/2023 to 5/31/2023. 53 Montana residents were affected.

Enstar (US) Inc. reported a data event occurring on May 29, 2023. The incident affected residents of California and several other states. The specific nature of the breach and the number of affected individuals are not disclosed in the provided summary or attachment excerpts, though credit monitoring was offered. The company is a financial services entity.

Enstar (US) Inc. notified Rhode Island residents of a data breach involving the MOVEit Transfer tool. The criminal group CL0P exploited a zero-day vulnerability to access the server between May 29 and May 31, 2023, and exfiltrated data. The breach affected 103 Rhode Island residents, exposing names and government identifiers. Enstar reported the incident to law enforcement, engaged forensic specialists, and offered 24 months of credit monitoring.