Pension Benefit Information, LLC

Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving its MOVEit Transfer server, exploited by a third party on May 29-30, 2023. The incident involved the exfiltration of personal information, including names and government identifiers. PBI patched systems, engaged in investigation, and offered 12 months of credit monitoring via Kroll. The breach stems from a vulnerability in Progress Software's MOVEit product.

Pension Benefit Information, LLC (PBI) notified the New Hampshire Attorney General of a cybersecurity incident involving MOVEit Transfer software. An unauthorized third party exploited a vulnerability in MOVEit to access PBI's transfer servers on May 29-30, 2023, downloading data. PBI discovered the vulnerability around May 31, 2023. The incident affected 15 New Hampshire residents associated with the I.A.T.S.E. Staff Retirement and National Pension Funds. PBI patched servers, conducted manual reviews, and offered credit monitoring services.

Delaware Life Insurance Company notified the California AG of a data breach affecting its customers. The incident resulted from a vulnerability in Progress Software's MOVEit Transfer tool, exploited by an unauthorized third party on May 29-30, 2023. PBI, a service provider for Delaware Life, confirmed data was downloaded. Affected data includes names and other basic identity information. The company patched servers, investigated the scope, and is offering 24 months of identity monitoring via Kroll.

New Hampshire Attorney General notice regarding a data security event involving Pension Benefit Information, LLC (PBI), a vendor used by PNC Bank. PBI's MOVEit Transfer software was exploited via a zero-day vulnerability, leading to unauthorized access to annuitant data (name, DOB, SSN, state/zip) for 4 New Hampshire residents. PBI remediated the vulnerability, engaged forensic investigators, and offered credit monitoring services.

Pension Benefit Information, LLC (PBI) disclosed a breach involving a zero-day vulnerability in Progress Software's MOVEit Transfer software. An unknown actor accessed a PBI server on May 29-30, 2023, and downloaded data. PBI detected the vulnerability on May 31, 2023, patched systems, engaged third-party specialists, and notified law enforcement. Affected data included names and other identifiers. PBI offered credit monitoring services.

Pension Benefit Information, LLC notified the California AG of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's server on May 29-30, 2023, and downloading data. Affected data includes names and other data elements. PBI patched servers, investigated, and is offering credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI), a third-party vendor for Global Atlantic Financial Group, disclosed a breach involving the MOVEit Transfer software vulnerability. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, downloading data. The breach affects approximately 124 Hawaii residents. PBI patched servers, investigated, and is offering credit monitoring. No identity theft has been confirmed.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving MOVEit Transfer software exploited by an unauthorized third party on May 29-30, 2023. The incident affected data belonging to clients, including Aetna Life Insurance. PBI patched servers, investigated, and offered 12 months of credit monitoring. Data potentially exposed included names and government identifiers.

Aetna Life Insurance Company notified the Idaho Attorney General of a security incident involving its third-party vendor, Pension Benefits Information (PBI). PBI's MOVEit Transfer server was exploited, impacting 903 Idaho residents. Data included names, SSNs, and DOBs. PBI engaged Kroll for forensics and offered credit monitoring.

Delaware Life Insurance Company notified the California AG of a data breach affecting its customers. The incident resulted from an exploit of a vulnerability in Progress Software's MOVEit Transfer product, a third-party service used by Pension Benefit Information (PBI), a vendor for Delaware Life. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data containing names and other personal information. PBI discovered the vulnerability on May 31, 2023, when Progress Software disclosed it. PBI patched servers, investigated the scope, and is offering 24 months of identity monitoring to affected individuals.

Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. The compromised information included names and other basic identity data. PBI patched servers, investigated the incident, and is offering 12 months of credit monitoring and identity restoration services via Kroll to affected individuals. This was a supply-chain attack via a third-party vendor.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server, exploited via a vulnerability in Progress Software's MOVEit Transfer product. The incident occurred May 29-30, 2023. Data accessed included names and financial account numbers. PBI patched servers, engaged in investigation, and offered complimentary identity monitoring services to affected individuals.

Pension Benefit Information, LLC notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, resulting in the exfiltration of personal information including names and government identifiers. PBI patched servers, enhanced security policies, and offered 24 months of credit monitoring via Kroll.

Pension Benefit Information, LLC (PBI) experienced a data breach through a third-party event involving the MOVEit Transfer software. The breach occurred on May 29-30, 2023, and was discovered on June 2, 2023. The incident affected 336,672 individuals, compromising names and Social Security numbers. PBI began notifying affected individuals on August 25, 2023, and offered 24 months of credit monitoring and identity theft restoration services through Kroll.

Pension Benefit Information, LLC (PBI) notified the California AG of a data breach involving its third-party software provider, Progress Software. An unauthorized third party exploited a vulnerability in Progress's MOVEit Transfer software, accessing PBI's servers on May 29-30, 2023, and downloading data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other basic identity information. PBI has patched servers, investigated the scope, and is offering 24 months of credit monitoring via Kroll.

PBI Research Services (PBI) disclosed that an unauthorized third party exploited a vulnerability in MOVEit Transfer software to access files on May 29-30, 2023. The incident affected 1,318 New Hampshire residents, whose PII was downloaded. PBI patched the software, notified law enforcement, and offered one year of credit monitoring.

Pension Benefit Information, LLC (PBI) disclosed a data breach stemming from the MOVEit Transfer vulnerability exploited by an unauthorized third party. The attacker accessed PBI's MOVEit Transfer servers on May 29-30, 2023, downloading data containing names and other elements. PBI patched servers, investigated, and offered identity monitoring services. No identity theft was indicated at the time of filing.

Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from a vulnerability in Progress Software's MOVEit Transfer product. An unauthorized third party exploited this vulnerability to access PBI's MOVEit Transfer servers on May 29-30, 2023, and downloaded data. PBI became aware of the vulnerability on May 31, 2023. The incident involved the exfiltration of personal information, including names and other data elements. PBI patched servers, investigated the scope, and is offering 24 months of credit monitoring and identity restoration services through Kroll to affected individuals.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server exploited by an unauthorized third party on May 29-30, 2023. The incident affected 1,058 New Hampshire residents affiliated with PBI's clients. PBI patched servers, engaged in investigation, and provided 24 months of credit monitoring services to affected individuals.

Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited in May 2023. Unauthorized third parties accessed PBI servers on May 29-30, 2023, downloading data containing names and government identifiers. PBI patched systems, investigated, and offered 24 months of credit monitoring. No identity theft was confirmed.

Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party in May 2023. The incident affected individuals whose names and additional data elements were present on the server. PBI patched servers, investigated, and offered credit monitoring services. No identity theft was indicated.

Pension Benefit Information, LLC (PBI) notified MassMutual Ascend, Annuity Investors Life, and Manhattan National Life (collectively MMA) of a MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, resulting in the exfiltration of names, SSNs, DOBs, and policy numbers. PBI patched servers, engaged Kroll for 24 months of credit monitoring, and enhanced security policies. The filing is a sample consumer notification letter submitted to the Delaware Attorney General.

Pension Benefit Information, LLC (PBI) disclosed a supplemental breach notice regarding the MOVEit Transfer vulnerability exploited in May 2023. The incident affected data belonging to client Continental Casualty Company. PBI confirmed unauthorized access to a MOVEit server on May 29-30, 2023, resulting in data download. Affected data included names and government identifiers (SSN, driver's license). PBI patched systems, engaged forensic investigation, and offered 24 months of credit monitoring via Kroll. No identity theft was confirmed.

Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited in May 2023. The incident affected a limited number of Trane Technologies pension plan members, exposing names and government identifiers. PBI patched servers, enhanced security policies, and offered 24 months of credit monitoring.

Pension Benefit Information, LLC (PBI), a third-party vendor for TIAA, disclosed a MOVEit Transfer vulnerability exploitation. An unauthorized third party accessed PBI servers on May 29-30, 2023, downloading data. PBI patched servers, investigated, and is offering 24 months of Kroll identity monitoring. No identity theft confirmed.