Clustered 40 filings across 9 jurisdictions · filing window Jun 26, 2023 → Sep 19, 2023. View entity profile → Other incidents for this victim →
incident inc_06ad303e133c4e15 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA DE HI ID ME MT OR VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
40 filings across 9 jurisdictions · Jun 26, 2023 – Sep 19, 2023 · 2 milestones
May 29, 2023 → May 30, 2023
When the intrusion reportedly occurred, per the linked filings
May 29, 2023 – Jun 16, 2023
Earliest reported discovery May 29, 2023
May 29, 2023
Reported by DELAWARE AG filing
May 31, 2023
Reported by HAWAII AG, CALIFORNIA AG, DELAWARE AG, VERMONT AG filings
Jun 2, 2023
Reported by MAINE AG, OREGON AG, WASHINGTON AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Jun 9, 2023
Reported by IDAHO AG filing
Jun 16, 2023
Reported by IDAHO AG filing
Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred on May 29-30, 2023, affecting individuals whose full name, SSN, date of birth, contract number, and zip code were accessed. PBI patched servers, engaged in investigation, and offered 12 months of credit monitoring via Kroll.
Pension Benefit Information, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-10. The breach occurred from 5/29/2023 to 5/30/2023. 891 Montana residents were affected.
Affected (this filing): 891
Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes personal identifiable information. PBI patched servers, investigated the incident, and is offering 24 months of credit monitoring via Kroll. The incident is contained.
Pension Benefit Information, LLC reported an external system breach (hacking) occurring May 29-30, 2023, discovered June 2, 2023. The incident compromised names and Social Security Numbers of 371,359 individuals, including 1,912 Maine residents. The company notified consumers in writing on July 12, 2023, and provided 24 months of credit monitoring and identity theft restoration services through Kroll.
Affected (this filing): 371,359
Pension Benefit Information, LLC, a business sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-02 and filed notice on 2023-07-12. 18,856 Washington residents were affected. 40 days elapsed between awareness and notification. 4 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 18,856
Pension Benefit Information, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-12. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/2/2023. 371,359 individuals were affected. Notice was sent on 7/12/2023.
Affected (this filing): 371,359
Pension Benefit Information, LLC (PBI) notified the Delaware Attorney General of a security event involving approximately 1,604 Delaware residents. A threat actor exploited a zero-day vulnerability in Progress Software's MOVEit Transfer software to access PBI's servers on May 29-30, 2023, and exfiltrated data including names, partial addresses, Social Security numbers, and dates of birth. PBI patched the vulnerability, engaged third-party cybersecurity specialists, and offered two years of credit monitoring through Kroll. Notification to affected individuals began July 12, 2023.
Affected (this filing): 1,604
Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server exploited by an unauthorized third party on May 29-30, 2023. The incident involved the exfiltration of personal information, including names and government identifiers, from insurance and pension fund clients. PBI patched the server, conducted a manual review, and offered 12 months of credit monitoring via Kroll. No identity theft or fraud has been confirmed.
Pension Benefit Information, LLC (PBI) notified Delaware AG of a third-party software vulnerability in Progress Software's MOVEit Transfer application. An unauthorized third party accessed PBI's MOVEit servers on May 29-30, 2023, downloading consumer data. PBI patched servers, investigated, and offered 12 months of identity monitoring via Kroll. The incident involved identity and government-issued data for a limited number of consumers.
Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party on May 29-30, 2023. The incident resulted in the exfiltration of names, Social Security numbers, dates of birth, contract numbers, and zip codes. PBI patched servers, notified affected individuals, and offered 12 months of credit monitoring via Kroll. The filing is a Delaware Attorney General notice (ELN-18320) covering residents in multiple states.
Pension Benefit Information, LLC (PBI), a third-party vendor for Teachers Insurance and Annuity Association of America (TIAA), experienced a data security incident involving the MOVEit Transfer software vulnerability. An unauthorized third party accessed PBI's MOVEit Transfer servers on May 29-30, 2023, and exfiltrated files containing names, Social Security numbers, dates of birth, addresses, and gender of 8,051 Idaho residents. TIAA notified the Idaho Attorney General on July 21, 2023. PBI patched the software, investigated the scope, and offered 24 months of credit monitoring via Kroll to affected individuals.
Affected (this filing): 8,051
Pension Benefit Information, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-21. The breach occurred from 5/29/2023 to 5/30/2023. 262 Montana residents were affected.
Affected (this filing): 262
Pension Benefit Information, LLC (PBI), a third-party vendor for Transamerica Life Insurance Company, disclosed a data breach involving the MOVEit Transfer software vulnerability. An unauthorized third party exploited the vulnerability to access a PBI server on May 29-30, 2023 and downloaded data. PBI patched servers, investigated, and is offering 12 months of credit monitoring. The specific data types affected are redacted in the template but include PII and government IDs.
Pension Benefit Information, LLC notified the California AG of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's servers on May 29-30, 2023, and downloading data. Affected data includes full name, SSN, date of birth, contract number, and zip code. PBI patched servers, investigated, and offered 12 months of credit monitoring via Kroll.
Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's servers on May 29-30, 2023, and downloading data. PBI discovered the incident on May 31, 2023. Affected data includes names and other personal information. PBI patched servers, investigated the scope, and is offering 24 months of credit monitoring via Kroll.
Pension Benefit Information, LLC reported a third-party system breach involving MOVEit Transfer occurring May 29-30, 2023, discovered June 2, 2023. The incident affected 82,955 individuals, including 130 Maine residents. Acquired data included names and Social Security Numbers. The company provided 12 months of credit monitoring and identity theft restoration services to affected individuals.
Affected (this filing): 82,955
Pension Benefit Information, LLC notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited in May 2023. Attackers accessed servers on May 29-30, 2023, downloading names and other data elements. PBI patched servers, offered credit monitoring via Kroll, and enhanced security policies. No identity theft confirmed.
Pension Benefit Information, LLC notified the California AG of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's server on May 29-30, 2023, and downloading data. PBI discovered the issue on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other data elements. PBI patched servers, investigated, and is offering credit monitoring via Kroll.
Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, resulting in the exfiltration of personal information including names and government identifiers. PBI patched systems, engaged in investigation, and offered 12 months of credit monitoring via Kroll.
Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server, exploited by an unauthorized third party on May 29-30, 2023. The incident involved the MOVEit vulnerability disclosed by Progress Software on May 31, 2023. PBI notified affected individuals, including those in Vermont, offering credit monitoring. Data accessed included names and other data elements.
Pension Benefit Information, LLC (PBI) disclosed a data breach stemming from the MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, involving the exfiltration of names and other data elements. PBI notified affected individuals on August 10, 2023, offering credit monitoring services.
Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party in May 2023. The attacker accessed PBI servers and downloaded data containing names and government identifiers. PBI patched systems, offered 12 months of credit monitoring via Kroll, and is enhancing security policies. No identity theft was known at the time of notice.
Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party on May 29-30, 2023. The attacker accessed a PBI server and downloaded data containing names and other data elements. PBI patched servers, investigated, and is offering credit monitoring services. No identity theft was known at the time of filing.
Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, affecting personal information including names and government IDs. PBI patched systems, engaged in investigation, and offered 12 months of credit monitoring via Kroll.
Pension Benefit Information, LLC notified consumers of a data breach resulting from a vulnerability in Progress Software's MOVEit Transfer product. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other basic identity information. PBI patched servers, investigated the scope, and is offering 12 months of credit monitoring via Kroll.
Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred on May 29-30, 2023, resulting in the exfiltration of names and other data elements. PBI patched servers, investigated, and offered credit monitoring services. No identity theft was known at the time of notification.
Pension Benefit Information, LLC (PBI) disclosed a data breach involving its MOVEit Transfer server exploited by an unauthorized third party on May 29-30, 2023. The incident involved the exfiltration of personal information, including names and government identifiers, from clients such as Aetna Life Insurance Company. PBI patched the vulnerability, conducted a manual review, and offered 12 months of credit monitoring via Kroll to affected individuals.
Baltimore County, Maryland, reported a data security incident involving its third-party vendor, Pension Benefit Information, LLC (PBI). PBI's MOVEit Transfer software was exploited by an unauthorized third party on May 29-30, 2023. The incident affected 2 Idaho residents, whose names, addresses, Social Security numbers, dates of birth, and gender were accessed. PBI offered complimentary credit monitoring and identity restoration services through Kroll/Experian.
Affected (this filing): 2
Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party on May 29-30, 2023. The attacker accessed a PBI server and downloaded data containing names and other data elements. PBI patched servers, investigated, and offered credit monitoring services. The incident is classified as a third-party software vulnerability exploitation.
Pension Benefit Information, LLC (PBI) issued a supplemental notice regarding a MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred on May 29-30, 2023, involving the exfiltration of names and data elements from a PBI server. PBI patched servers, investigated, and offered credit monitoring. No identity theft was confirmed.
Pension Benefit Information, LLC disclosed a data breach resulting from a vulnerability in Progress Software's MOVEit Transfer product. An unauthorized third party accessed a MOVEit server on May 29-30, 2023, and downloaded data including names and other data elements. PBI discovered the incident on May 31, 2023, when Progress disclosed the vulnerability. The company patched servers, investigated the scope, and is offering credit monitoring to affected individuals.
Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. PBI discovered the incident around May 31, 2023, when Progress disclosed the vulnerability. Affected data includes names and other personal information. PBI has patched servers, conducted an investigation, and is offering 24 months of credit monitoring via Kroll.
Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited in May 2023. The incident affected a limited number of Trane Technologies pension plan members, exposing names and government identifiers. PBI patched servers, enhanced security policies, and offered 24 months of credit monitoring.
Pension Benefit Information, LLC (PBI) notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party in May 2023. The incident affected individuals whose names and additional data elements were present on the server. PBI patched servers, investigated, and offered credit monitoring services. No identity theft was indicated.
Pension Benefit Information, LLC notified consumers of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, resulting in the exfiltration of personal information including names and government identifiers. PBI patched servers, enhanced security policies, and offered 24 months of credit monitoring via Kroll.
Pension Benefit Information, LLC (PBI) experienced a data breach through a third-party event involving the MOVEit Transfer software. The breach occurred on May 29-30, 2023, and was discovered on June 2, 2023. The incident affected 336,672 individuals, compromising names and Social Security numbers. PBI began notifying affected individuals on August 25, 2023, and offered 24 months of credit monitoring and identity theft restoration services through Kroll.
Affected (this filing): 336,672
Pension Benefit Information, LLC (PBI) disclosed a data breach stemming from the MOVEit Transfer vulnerability exploited by an unauthorized third party. The attacker accessed PBI's MOVEit Transfer servers on May 29-30, 2023, downloading data containing names and other elements. PBI patched servers, investigated, and offered identity monitoring services. No identity theft was indicated at the time of filing.
Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from a vulnerability in Progress Software's MOVEit Transfer product. An unauthorized third party exploited this vulnerability to access PBI's MOVEit Transfer servers on May 29-30, 2023, and downloaded data. PBI became aware of the vulnerability on May 31, 2023. The incident involved the exfiltration of personal information, including names and other data elements. PBI patched servers, investigated the scope, and is offering 24 months of credit monitoring and identity restoration services through Kroll to affected individuals.
Pension Benefit Information, LLC (PBI) disclosed a data breach resulting from the exploitation of a vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's MOVEit server on May 29-30, 2023, and downloaded data. The compromised information included names and other basic identity data. PBI patched servers, investigated the incident, and is offering 12 months of credit monitoring and identity restoration services via Kroll to affected individuals. This was a supply-chain attack via a third-party vendor.
Pension Benefit Information, LLC notified the California AG of a data breach involving its MOVEit Transfer software. An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer, accessing PBI's server on May 29-30, 2023, and downloading data. Affected data includes names and other data elements. PBI patched servers, investigated, and is offering credit monitoring via Kroll.