Northwestern Mutual Capital, LLC

Northwestern Mutual reported a data breach involving its vendor Progress Software's MOVEit Transfer application. On May 31, 2023, Progress announced a previously unknown vulnerability (zero-day) in MOVEit. Unauthorized actors exploited this vulnerability to download files containing personal information of Northwestern Mutual clients. The company took the application offline, activated incident response, retained cybersecurity experts, and notified law enforcement. Affected individuals are offered two years of credit monitoring and identity restoration services via Kroll. The incident is contained.