Progress Software Corporation

Consumer Reports notifies Montana annuitants of a data breach involving third-party vendor Pension Benefit Information, LLC (PBI). PBI's MOVEit Transfer software was exploited via a zero-day vulnerability (May 29-30, 2023), exposing names, DOBs, SSNs, and state/zip codes. Consumer Reports confirmed its systems were not directly exposed but annuitant data was impacted via PBI/PNC. Notification sent August 18, 2023.

Progress Software Corporation disclosed a zero-day vulnerability in MOVEit Transfer, found after a May 28, 2023 customer report of unusual activity in a MOVEit Transfer instance. Progress determined the vulnerability could provide for unauthorized escalated privileges and access to the customer's underlying environment. It engaged forensic experts, outside counsel and law enforcement, and released a patch on May 31, 2023. The investigation is ongoing; Progress does not expect a material impact.

PROGRESS SOFTWARE CORP. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-738). The register records the breach as discovered on May 31, 2023. Additional entities named: MOVEIT TRANSFER SOFTWARE, U OF MISSOURI. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.