NASSAU LIFE AND ANNUITY COMPANY

Nassau Life & Annuity Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-18. 78 Massachusetts residents were affected.

Nassau Life and Annuity Company reported a cybersecurity incident impacting 78 New Hampshire residents. A threat actor exploited a vulnerability in the MOVEit Transfer software used by third-party vendor Pension Benefit, LLC (PBI), which administers data for Nassau via illumifin. The breach occurred May 29-30, 2023. Nassau confirmed the compromise on July 25, 2023, and is notifying affected individuals.

Nassau Life and Annuity Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-09-01. 1,852 Indiana residents were affected. 71,228 individuals affected in total.

Nassau Life and Annuity Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-31. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 7/25/2023. 71,228 individuals were affected. Notice was sent on 9/1/2023.

Pension Benefit Information, LLC (PBI) notified the California AG of a data breach involving its third-party software provider, Progress Software (MOVEit Transfer). An unauthorized third party exploited a vulnerability in MOVEit to access PBI's servers on May 29-30, 2023, and downloaded data. PBI discovered the vulnerability disclosure on May 31, 2023. Affected data includes names and other basic identity information. PBI patched servers, investigated the scope, and is offering 24 months of credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) disclosed a third-party software event involving the MOVEit Transfer vulnerability exploited by an unauthorized third party. Access occurred May 29-30, 2023. PBI patched servers, investigated, and is offering 24 months of credit monitoring. Data types affected include names and other PII. No identity theft or fraud indicated.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred on May 29-30, 2023, and was discovered on May 31, 2023. PBI confirmed that an unauthorized party accessed a MOVEit server and downloaded data containing names and other data elements. PBI patched servers, engaged in investigation, and is offering 24 months of credit monitoring to affected individuals.

Nassau Life and Annuity Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-27. 493 Massachusetts residents were affected. The report records the breach type as electronic.

NASSAU LIFE & ANNUITY CO. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-609). The register records the breach as discovered on May 30, 2023. Additional entities named: MOVEIT, PBI. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.