Teachers Insurance and Annuity Association of America
ent_7d7887b811e2c1e690f97267
Disclosures
17
State AG · 11 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
2,373,076
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Teachers Insurance and Annuity Association of America
- Normalized
- teachers insurance and annuity association of america— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (17)newest first
- Indiana State AGas victim2025-01-16
Teachers Insurance and Annuity Association of America reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-16 and was reported on 2025-01-16. 1 Indiana residents were affected.
- Massachusetts State AGas victim2024-12-03
Teachers Insurance and Annuity Association of America (TIAA) Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-03. 1 Massachusetts residents were affected.
- Indiana State AGas victim2024-03-07
Teachers Insurance and Annuity Associate of America reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-29 and was reported on 2024-03-07. 7,119 Indiana residents were affected. 16,713 individuals affected in total.
- Indiana State AGas victim2023-11-28
Teachers Insurance and Annuity Association of America reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-16 and was reported on 2023-11-28. 1 Indiana residents were affected.
- Indiana State AGas victim2023-10-13
Teachers Insurance and Annuity Association of America reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-04 and was reported on 2023-10-13. 1 Indiana residents were affected.
- New Hampshire State AGas victim2023-08-17
Pension Benefit Information, LLC (PBI), a third-party vendor for TIAA, disclosed a MOVEit Transfer vulnerability exploitation. An unauthorized third party accessed PBI servers on May 29-30, 2023, downloading data. PBI patched servers, investigated, and is offering 24 months of Kroll identity monitoring. No identity theft confirmed.
- Washington State AGas victim2023-07-27
TIAA notified Washington AG of a data security incident affecting 56,331 residents. Third-party vendor PBI was impacted by the MOVEit Transfer vulnerability (exploited May 29-30, 2023). TIAA learned of the investigation on June 9, 2023. Exfiltrated data included names, SSNs, DOBs, addresses, and gender. Notifications began July 14, 2023, offering 2 years of credit monitoring.
- Hawaii State AGas victim2023-07-27
Pension Benefit Information, LLC (PBI), a third-party service provider for Teachers Insurance and Annuity Association of America (TIAA), disclosed that an unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software. The attacker accessed PBI's servers on May 29-30, 2023, and downloaded data containing names, Social Security numbers, dates of birth, addresses, and gender. PBI patched servers, investigated the incident, and is offering 24 months of identity monitoring through Kroll to affected individuals.
- South Carolina State AGas victim2023-07-27
Pension Benefit Information, LLC (PBI) disclosed a third-party software event involving the MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, affecting data including names, SSNs, DOBs, addresses, and gender for individuals associated with TIAA. PBI patched servers, investigated, and offered 24 months of identity monitoring.
- Maine State AGas victim2023-07-24
Teachers Insurance and Annuity Association of America (TIAA) reported a data breach affecting 2,373,076 individuals, originating from a vulnerability in the MOVEit transfer software, a third-party vendor. The breach occurred on May 29, 2023, and was discovered on June 28, 2023. The compromised information includes names and Social Security numbers. TIAA offered affected individuals 24 months of identity theft protection services through Kroll.
- California State AGas victim2023-07-24
Teachers Insurance and Annuity Association of America (TIAA) notified the California AG of a data breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software, accessing PBI's servers on May 29-30, 2023, and downloading data. Affected information includes names, Social Security numbers, dates of birth, addresses, and gender. TIAA/PBI patched servers, investigated the incident, and offered 24 months of identity monitoring via Kroll.
- Idaho State AGas reporting2023-07-21
Pension Benefit Information, LLC (PBI), a third-party vendor for Teachers Insurance and Annuity Association of America (TIAA), experienced a data security incident involving the MOVEit Transfer software vulnerability. An unauthorized third party accessed PBI's MOVEit Transfer servers on May 29-30, 2023, and exfiltrated files containing names, Social Security numbers, dates of birth, addresses, and gender of 8,051 Idaho residents. TIAA notified the Idaho Attorney General on July 21, 2023. PBI patched the software, investigated the scope, and offered 24 months of credit monitoring via Kroll to affected individuals.
- California State AGas victim2023-07-21
Teachers Insurance and Annuity Association of America (TIAA) notified the California AG of a data breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software, accessing PBI servers on May 29-30, 2023, and downloading data. Affected information includes names, Social Security numbers, dates of birth, addresses, and gender. TIAA/PBI patched servers, investigated the incident, and offered 24 months of identity monitoring.
- Massachusetts State AGas victim2023-07-21
Teachers Insurance and Annuity Association of America ("TIAA") reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-21. 105,508 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-07-21
Pension Benefit Information, LLC (PBI) notified TIAA customers in Montana of a data breach involving the MOVEit Transfer software provided by Progress Software. An unauthorized third party exploited a vulnerability in MOVEit to access a PBI server on May 29-30, 2023, downloading data including names, SSNs, DOBs, addresses, and gender. PBI patched servers, investigated, and is offering 24 months of identity monitoring.
- Delaware State AGas victim2023-07-14
Pension Benefit Information, LLC (PBI), a third-party vendor for Teachers Insurance and Annuity Association of America (TIAA), disclosed a MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, involving the exfiltration of names, SSNs, DOBs, addresses, and gender. PBI patched servers, investigated, and offered 24 months of Kroll identity monitoring. No identity theft or fraud has been indicated.
- Indiana State AGas victim2023-07-14
Teachers Insurance and Annuity Association of America reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-14. 47,931 Indiana residents were affected. 2,373,076 individuals affected in total.
Supply-chain cascadesreviewed and confirmed
- Teachers Insurance and Annuity Association of America’s filing is one of at least 97 in the Progress Software Corporation supply-chain incident (2023).