The Global Atlantic Financial Group LLC
ent_ad65d48472bd734cdb0eee09
Disclosures
15
State AG · 10 jurisdictions
Multi-filing incidents
5
incidents joining 2+ filings here
Max affected reported
972,485
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Global Atlantic Financial Group LLC
- Normalized
- the global atlantic financial— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- globalatlantic.com
Disclosure history (15)newest first
- Massachusetts State AGas victim2024-08-15
The Global Atlantic Financial Group LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-08-15. 6 Massachusetts residents were affected.
- Montana State AGas reporting2024-04-02
Global Atlantic Financial Group LLC notified Montana residents of a cybersecurity incident at third-party administrator Infosys McCamish Systems, LLC. Unauthorized access occurred around Nov 2, 2023. McCamish disabled systems, engaged forensic and e-discovery firms, and restored services. Potential exposure of policyholder PII (SSN, DOB, contact info) is under investigation. Kroll provides 24 months of identity monitoring.
- Indiana State AGas victim2024-04-02
The Global Atlantic Financial Group LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-02 and was reported on 2024-04-02. 28 Indiana residents were affected. 1,234 individuals affected in total.
- New Hampshire State AGas victim2024-04-01
The Global Atlantic Financial Group LLC notified the NH Attorney General of a cybersecurity incident at its third-party administrator, Infosys McCamish Systems, LLC. McCamish discovered unauthorized access to its systems on November 2, 2023, and informed Global Atlantic on November 3, 2023. Global Atlantic determined that one New Hampshire resident's data may have been impacted. The incident involved potential exposure of policyholder data including names, addresses, SSNs, and policy numbers. Global Atlantic offered 24 months of credit monitoring. The incident is contained, and Global Atlantic's own systems were not compromised.
- Massachusetts State AGas victim2024-03-29
The Global Atlantic Financial Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-29. 4 Massachusetts residents were affected.
- Hawaii State AGas victim2023-09-14
Pension Benefit Information, LLC (PBI) notified Global Atlantic Financial Group policyholders in Hawaii of a data breach involving the MOVEit Transfer software vulnerability. The incident occurred May 29-30, 2023, when an unauthorized third party accessed a PBI server and downloaded data. Approximately 124 Hawaii residents were affected. PBI patched servers, investigated, and offered credit monitoring. No identity theft was confirmed.
- Hawaii State AGas victim2023-08-24
Global Atlantic Financial Group notified Hawaii residents of a data incident involving the MOVEit transfer tool. The breach exposed personal information including names, SSNs, and DOBs. The company engaged forensic experts, reported to authorities, and offered two years of Experian IdentityWorks protection. No specific count of affected individuals was provided in this filing.
- South Carolina State AGas victim2023-08-21
Global Atlantic Financial Group LLC notified South Carolina residents of a third-party data breach involving vendor Pension Benefits Information LLC (PBI). Cybercriminals exploited a vulnerability in PBI's MOVEit file transfer application on May 29-30, 2023, exfiltrating policyholder data including names and government IDs. Global Atlantic's own systems were not compromised. Notification was sent July 28, 2023, offering two years of Experian IdentityWorks.
- California State AGas victim2023-08-14
The Global Atlantic Financial Group LLC notified California residents of a data breach involving a third-party vendor, Pension Benefits Information LLC (PBI). Cyber criminals exploited an unknown vulnerability in PBI's MOVEit file transfer application, accessing data on May 29-30, 2023. Global Atlantic was notified on June 7, 2023. The incident impacted policyholder data, including personal identifiable information. The company engaged experts, reported to authorities, and offered two years of Experian IdentityWorks to affected individuals.
- Oregon State AGas victim2023-08-08
The Global Atlantic Financial Group LLC (“Global Atlantic”) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-08. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/7/2023. 972,485 individuals were affected. Notice was sent on 7/28/2023.
- Massachusetts State AGas victim2023-08-08
The Global Atlantic Financial Group LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-08. 18,434 Massachusetts residents were affected. The report records the breach type as electronic.
- Delaware State AGas reporting2023-07-28
Global Atlantic Financial Group LLC notified policyholders that third-party vendor Pension Benefits Information LLC (PBI) experienced a MOVEit file transfer vulnerability exploitation. Cyber criminals accessed PBI's server on May 29-30, 2023, and exfiltrated policyholder data including names and government identifiers. Global Atlantic learned of the incident on June 7, 2023, and issued notifications on July 28, 2023, offering two years of Experian IdentityWorks. Global Atlantic's own environment was not compromised.
- Delaware State AGas victim2023-07-28
The Global Atlantic Financial Group LLC (GAFG) disclosed a cybersecurity incident involving its third-party vendor, Pension Benefits Information LLC (PBI). PBI's MOVEit file transfer application was exploited via an unpatched vulnerability (zero-day at the time) between May 29-30, 2023. Cybercriminals exfiltrated policyholder data, including names and government identifiers (SSNs, DOBs). GAFG notified affected individuals in July 2023, offering two years of credit monitoring. GAFG stated its own environment was not directly compromised.
- Washington State AGas victim2023-07-28
The Global Atlantic Financial Group LLC reported a breach involving third-party vendor Pension Benefits Information LLC (PBI). Cyber criminals exploited a vulnerability in MOVEit file transfer software to access data on May 29-30, 2023. Global Atlantic was notified on June 7, 2023. The incident impacted policyholder data including names and government IDs. 62,433 Washington residents were affected. Notices were sent on July 28, 2023, offering credit monitoring.
- Indiana State AGas victim2023-07-28
The Global Atlantic Financial Group LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-28. 32,876 Indiana residents were affected. 972,485 individuals affected in total.
Supply-chain cascadesreviewed and confirmed
- The Global Atlantic Financial Group LLC’s filing is one of at least 20 in the INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024).
- The Global Atlantic Financial Group LLC’s filing is one of at least 31 in the Pension Benefit Information, LLC supply-chain incident (2023).