Willis Towers Watson Group Trust

Willis North America Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-14. 108 Massachusetts residents were affected.

Willis Towers Watson US LLC and its affiliate Acclaris, Inc. reported a data breach affecting 4 Maine residents. The breach originated with a third-party vendor, Pension Benefit Information, LLC (PBI), which uses the MOVEit Transfer software. A zero-day vulnerability in MOVEit was exploited by a threat actor between May 29 and May 30, 2023, leading to data exfiltration. The compromised information includes names and Social Security numbers. The breach was discovered on June 22, 2023, and affected individuals were notified on August 10, 2023, with an offer of 24 months of identity monitoring services from Kroll.

Pension Benefit Information, LLC (PBI) notified affected individuals of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred on May 29-30, 2023, involving the exfiltration of names and other data elements. PBI patched servers, engaged in investigation, and offered credit monitoring services.

Willis Towers Watson US LLC and its affiliate Acclaris, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-20. 97 Massachusetts residents were affected. The report records the breach type as electronic.

Acclaris Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-29. 4 Massachusetts residents were affected. The report records the breach type as electronic.

Acclaris, an employee benefits administration firm, notified the New Hampshire Attorney General of a security incident involving one NH resident. On March 24, 2021, Acclaris discovered that a resident's PII (name, SSN, DOB, zip) was used to fraudulently access retirement program data. The breach concluded on September 14, 2020. Acclaris identified a suspect, coordinated with law enforcement, enhanced procedures, and offered 24 months of IDX identity protection services.

Acclaris Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-28. 4 Massachusetts residents were affected. The report records the breach type as undefined.

Willis North America Inc. Medical Expense Benefit Plan (NY, Health Plan) reported to HHS on 2014-04-24 an Unauthorized Access/Disclosure affecting 4,830 individuals. A group health plan administrator accidentally emailed 1,889 plan participants a spreadsheet containing PHI of 4,830 participants, including names, dates of birth, and Social Security numbers. Breached information located in Email. No business associate was involved. The CE took extensive corrective action including deleting the email from inboxes, sanctioning the administrator, updating HIPAA training, and offering two years of identity theft protection.

Willis North America Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-04-22. 100 Massachusetts residents were affected. The report records the breach type as electronic.

Willis North America Inc. Medical Expense Benefit Plan notified NH AG of a misdelivery incident on March 19, 2014. An administrator accidentally emailed a spreadsheet containing PII (SSN, DOB, names) to enrolled employees. 47 NH residents affected. No improper use detected. Remediation included deletion of copies and 2 years of ID theft protection.