Milliman Solutions LLC

Pension Benefit Information, LLC notified South Carolina residents of a third-party software vulnerability in MOVEit Transfer exploited by an unauthorized third party. Access occurred May 29-30, 2023. Data involved: name, address, DOB, SSN. PBI patched servers, investigated, and offered 24 months of identity monitoring.

Milliman Solutions LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-17. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/16/2023. 1,280,823 individuals were affected. Notice was sent on 7/17/2023.

Milliman Solutions LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-17. 28,173 Indiana residents were affected. 1,280,823 individuals affected in total.

Pension Benefit Information, LLC notified Montana residents of a MOVEit Transfer vulnerability exploited by a third party on May 29-30, 2023. The incident involved unauthorized access and data download. PBI patched servers, investigated, and offered 12 months of identity monitoring. Data types included PII and government IDs. No identity theft confirmed.

Milliman Solutions, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-17. 14,752 Massachusetts residents were affected. The report records the breach type as electronic.

Milliman Solutions, LLC d/b/a Milliman Intelliscript reported a data breach affecting 17,235 Washington residents. The incident involved a third-party vendor, Pension Benefit Information, LLC, whose MOVEit Transfer software was exploited via zero-day vulnerability CVE-2023-34362. Unauthorized access occurred May 29-30, 2023, resulting in the exfiltration of names, addresses, DOBs, and SSNs. Notifications were sent July 17, 2023, including 12 months of credit monitoring.

Milliman Solutions LLC reported a data breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). PBI utilized Progress Software's MOVEit Transfer software, which contained a zero-day vulnerability (CVE-2023-34362). An unauthorized actor accessed PBI's servers on May 29-30, 2023, and exfiltrated data. The breach affected approximately 1,280,823 individuals nationwide, including 4,206 Maine residents. Affected data included names and Social Security Numbers. Notification to consumers began on July 17, 2023, offering 12 months of credit monitoring and identity theft restoration services.

Pension Benefit Information, LLC (PBI), a provider of audit and address research services for insurance companies and pension funds, experienced a data breach via a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data containing consumer information. PBI discovered the vulnerability on May 31, 2023, when Progress Software disclosed it. PBI patched servers, investigated the scope, and is offering 12 months of identity monitoring through Kroll to affected individuals. The incident is contained.

Milliman, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-07-23 and was reported on 2020-08-06. 1 Indiana residents were affected. 570 individuals affected in total.