Global Atlantic

The Global Atlantic Financial Group LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-02 and was reported on 2024-04-02. 28 Indiana residents were affected. 1,234 individuals affected in total.

Global Atlantic Financial Group LLC notified the NH Attorney General of a cybersecurity incident involving its third-party administrator, Infosys McCamish Systems, LLC. McCamish experienced unauthorized access to its systems around November 2, 2023. The incident potentially impacted policyholder data (names, SSNs, DOBs, driver's licenses) of 1 New Hampshire resident. Global Atlantic is offering 24 months of credit monitoring. The investigation is ongoing to confirm specific data elements.

Global Atlantic Financial Group, LLC notified Hawaii regulators of a cybersecurity incident involving the MOVEit file transfer application. The breach exposed personal information, including names and Social Security numbers, of affected individuals. Global Atlantic engaged forensic experts, reported the incident, and offered two years of Experian IdentityWorks membership to victims. The company stated its own corporate environment was not compromised.

The Global Atlantic Financial Group LLC notified California residents of a data breach involving a third-party vendor, Pension Benefits Information LLC (PBI). Cyber criminals exploited an unknown vulnerability in PBI's MOVEit file transfer application, accessing data on May 29-30, 2023. Global Atlantic was notified on June 7, 2023. The incident impacted policyholder data, including personal identifiable information. The company engaged experts, reported to authorities, and offered two years of Experian IdentityWorks to affected individuals.

Global Atlantic Financial Group LLC notified policyholders that third-party vendor Pension Benefits Information LLC (PBI) experienced a MOVEit file transfer vulnerability exploitation. Cyber criminals accessed PBI's server on May 29-30, 2023, and exfiltrated policyholder data including names and government identifiers. Global Atlantic learned of the incident on June 7, 2023, and issued notifications on July 28, 2023, offering two years of Experian IdentityWorks. Global Atlantic's own environment was not compromised.

The Global Atlantic Financial Group LLC (GAFG) disclosed a cybersecurity incident involving its third-party vendor, Pension Benefits Information LLC (PBI). PBI's MOVEit file transfer application was exploited via an unpatched vulnerability (zero-day at the time) between May 29-30, 2023. Cybercriminals exfiltrated policyholder data, including names and government identifiers (SSNs, DOBs). GAFG notified affected individuals in July 2023, offering two years of credit monitoring. GAFG stated its own environment was not directly compromised.