Pension Benefit Information, LLC

Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving its MOVEit Transfer server, exploited by a third party on May 29-30, 2023. The incident involved the exfiltration of personal information, including names and government identifiers. PBI patched systems, engaged in investigation, and offered 12 months of credit monitoring via Kroll. The breach stems from a vulnerability in Progress Software's MOVEit product.

Pension Benefit Information, LLC (PBI) notified the New Hampshire Attorney General of a cybersecurity incident involving MOVEit Transfer software. An unauthorized third party exploited a vulnerability in MOVEit to access PBI's transfer servers on May 29-30, 2023, downloading data. PBI discovered the vulnerability around May 31, 2023. The incident affected 15 New Hampshire residents associated with the I.A.T.S.E. Staff Retirement and National Pension Funds. PBI patched servers, conducted manual reviews, and offered credit monitoring services.

New Hampshire Attorney General notice regarding a data security event involving Pension Benefit Information, LLC (PBI), a vendor used by PNC Bank. PBI's MOVEit Transfer software was exploited via a zero-day vulnerability, leading to unauthorized access to annuitant data (name, DOB, SSN, state/zip) for 4 New Hampshire residents. PBI remediated the vulnerability, engaged forensic investigators, and offered credit monitoring services.

Pension Benefit Information, LLC (PBI) disclosed a breach involving a zero-day vulnerability in Progress Software's MOVEit Transfer software. An unknown actor accessed a PBI server on May 29-30, 2023, and downloaded data. PBI detected the vulnerability on May 31, 2023, patched systems, engaged third-party specialists, and notified law enforcement. Affected data included names and other identifiers. PBI offered credit monitoring services.

Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's servers on May 29-30, 2023, and downloading data. PBI discovered the vulnerability disclosure on May 31, 2023. Affected data includes names and other personal information. PBI patched servers, investigated the incident, and is offering credit monitoring through Kroll.

Pension Benefit Information, LLC (PBI) notified the NH AG of a breach involving its MOVEit Transfer server, exploited via a zero-day vulnerability in Progress Software's software. Attackers accessed the server on May 29-30, 2023, exfiltrating personal information (names, SSNs, DOBs, etc.) of 80 NH residents. Notifications were mailed on August 31, 2023, offering 24 months of credit monitoring.

Pension Benefit Information, LLC notified the California AG of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's server on May 29-30, 2023, and downloading data. Affected data includes names and other data elements. PBI patched servers, investigated, and is offering credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) notified the California AG of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's servers on May 29-30, 2023, and downloading data. PBI discovered the issue on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes personal information of individuals associated with Global Atlantic Financial Group policies. PBI patched servers, investigated the scope, and is offering credit monitoring via Experian. The incident is contained.

Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from a vulnerability in Progress Software's MOVEit Transfer product. An unauthorized third party exploited this vulnerability to access PBI's MOVEit server on May 29-30, 2023, and downloaded data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. The affected data includes names and other basic identity information. PBI has patched servers, investigated the scope, and is offering 12 months of credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) notified Global Atlantic Financial Group policyholders in Hawaii of a data breach involving the MOVEit Transfer software vulnerability. The incident occurred May 29-30, 2023, when an unauthorized third party accessed a PBI server and downloaded data. Approximately 124 Hawaii residents were affected. PBI patched servers, investigated, and offered credit monitoring. No identity theft was confirmed.

Pension Benefit Information, LLC (PBI) notified individuals that an unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer product to access PBI's servers on May 29-30, 2023, and download data. The compromised data included names and other personal information. PBI patched servers, investigated the scope, and is offering 12 months of credit monitoring via Kroll. This was a supply-chain attack via a third-party vendor.

Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. The compromised information included names and other basic identity data. PBI patched servers, investigated the incident, and is offering 12 months of credit monitoring and identity restoration services via Kroll to affected individuals. This was a supply-chain attack via a third-party vendor.

Pension Benefit Information, LLC (PBI) notified the California AG of a data breach involving its third-party software provider, Progress Software (MOVEit Transfer). An unauthorized third party exploited a vulnerability in MOVEit to access PBI's servers on May 29-30, 2023, and downloaded data. PBI discovered the vulnerability disclosure on May 31, 2023. Affected data includes names and other basic identity information. PBI patched servers, investigated the scope, and is offering 24 months of credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) disclosed a third-party software event involving the MOVEit Transfer vulnerability exploited by an unauthorized third party. Access occurred May 29-30, 2023. PBI patched servers, investigated, and is offering 24 months of credit monitoring. Data types affected include names and other PII. No identity theft or fraud indicated.

Pension Benefit Information, LLC notified Loyal American Life Insurance Company that an unauthorized third party exploited a vulnerability in MOVEit Transfer software (provided by Progress Software) to access data on May 29-30, 2023. PBI downloaded data including names and other elements. PBI patched servers, investigated, and is offering 24 months of credit monitoring.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, affecting individuals whose names and other data were present on the server. PBI patched servers, investigated, and is offering credit monitoring services.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server, exploited via a vulnerability in Progress Software's MOVEit Transfer product. The incident occurred May 29-30, 2023. Data accessed included names and financial account numbers. PBI patched servers, engaged in investigation, and offered complimentary identity monitoring services to affected individuals.

Pension Benefit Information, LLC (PBI) notified South Carolina residents of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023. PBI accessed data including names and other elements. PBI patched servers, investigated, and offered identity monitoring services.

Pension Benefit Information, LLC notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, resulting in the exfiltration of personal information including names and government identifiers. PBI patched servers, enhanced security policies, and offered 24 months of credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) experienced a data breach through a third-party event involving the MOVEit Transfer software. The breach occurred on May 29-30, 2023, and was discovered on June 2, 2023. The incident affected 336,672 individuals, compromising names and Social Security numbers. PBI began notifying affected individuals on August 25, 2023, and offered 24 months of credit monitoring and identity theft restoration services through Kroll.

Pension Benefit Information, LLC (PBI) notified the California AG of a data breach involving its third-party software provider, Progress Software. An unauthorized third party exploited a vulnerability in Progress's MOVEit Transfer software, accessing PBI's servers on May 29-30, 2023, and downloading data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other basic identity information. PBI has patched servers, investigated the scope, and is offering 24 months of credit monitoring via Kroll.

PBI Research Services, a third-party provider for NTT DATA Americas, Inc., experienced unauthorized access to MOVEit Transfer servers between May 29-30, 2023, exploiting a vulnerability disclosed by Progress Software. The incident exposed names, SSNs, and dates of birth of 6,228 Washington residents. PBI patched systems, notified law enforcement, and offered credit monitoring.

NTT DATA Americas, Inc., on behalf of PBI Research Services, reported an external system breach that occurred from May 29 to May 30, 2023. The breach was discovered on July 21, 2023, and affected 1,769 Maine residents. The compromised information includes names and Social Security numbers. Affected individuals were notified on August 25, 2023, and offered one year of credit monitoring and identity theft protection services from Kroll.

NTT DATA Americas, Inc. on behalf of PBI Research Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-24. 3,008 Massachusetts residents were affected. The report records the breach type as electronic.

Pension Benefit Information, LLC notified California residents that an unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software to access and download data from PBI's servers on May 29-30, 2023. The incident was discovered on May 31, 2023. Affected data includes names and other data elements. PBI patched servers, investigated the scope, and is offering identity monitoring services through Kroll.