Enstar Group

Allianz Global Risks U.S. Insurance Company notified the NH AG of a data breach affecting its third-party vendor, Enstar (US) Inc. Enstar suffered a security incident on May 31, 2023, due to an exploited zero-day vulnerability in MOVEit file transfer software. Unauthorized access occurred May 29-31, 2023, resulting in data exfiltration. Allianz learned of the incident on November 21, 2023, after Enstar notified its administrator, AZRA. Affected data includes PII such as names and government IDs. Enstar provided credit monitoring via Experian.

Enstar (US) Inc. disclosed that an unauthorized actor, identified as the criminal group CL0P, exploited a zero-day vulnerability in the MOVEit Transfer tool (provided by Progress Software Corp.) to access its server between May 29 and May 31, 2023. The actor exfiltrated data, including names and other personal information. Enstar launched an investigation with third-party forensic specialists, reported the incident to law enforcement, and is offering 24 months of credit monitoring and identity theft restoration services to affected individuals. The incident was discovered on May 31, 2023, when Progress Software publicly disclosed the vulnerability.

Enstar (US) Inc. notified Vermont AG of a data breach involving the MOVEit Transfer zero-day vulnerability exploited by the CL0P criminal group. The incident occurred May 29-31, 2023. Enstar engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring. Data accessed included names and other elements.

Enstar (US), Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-05-03. The breach occurred during 5/30/2023 - 5/31/2023. The breach was discovered on 10/21/2023. 75,101 individuals were affected. Notice was sent on 11/20/202312/19/20235/3/2024.

Enstar (US) Inc filed a supplemental data breach notification with the California Attorney General. The incident occurred between May 30 and May 31, 2023. The notice offers 24 months of credit monitoring via Experian. Specific data types and affected counts are not detailed in the provided excerpts, though identity and financial data are implied by the remediation offer. The filing covers residents of multiple states including CA, RI, DC, MD, NM, NY, and NC.

Enstar US Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a data event affecting individuals in multiple states. The incident, occurring in June 2023, involved unauthorized access to personal information including names, addresses, and Social Security numbers. Enstar notified the FBI, offered 24 months of credit monitoring via Experian, and implemented additional security safeguards.

Enstar (US), Inc. reported an external system breach that occurred on May 30, 2023, and was discovered on October 21, 2023. The breach affected 88 Maine residents, compromising names and driver's license or non-driver identification card numbers. Enstar is offering 24 months of credit monitoring and identity theft restoration services to affected individuals.

Enstar (US) Inc filed a supplemental data breach notification with the California Attorney General. The incident occurred between May 29 and May 31, 2023. The notice affects residents of California, Rhode Island, and other states. Social Security numbers and other personal information were potentially compromised. The company is offering 24 months of credit monitoring and identity restoration services through Experian. The specific cause of the breach and the total number of affected individuals are not detailed in the provided excerpts.

Enstar (US) Inc. notified consumers of a data breach involving its MOVEit Transfer server. The criminal group CL0P exploited a zero-day vulnerability (May 29-31, 2023) to exfiltrate data. Affected data included names and other elements. Enstar engaged forensic specialists, reported to law enforcement, and offered 24 months of credit monitoring. Rhode Island residents were explicitly identified as impacted.

Enstar (US) Inc. disclosed a data breach resulting from the exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer tool by the CL0P criminal group. The incident occurred between May 29 and May 31, 2023. The breach exposed personal information including names and government identifiers. Enstar engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring. 103 Rhode Island residents were explicitly identified as affected.