💎Delaware State AGlinked via multistate filing link · 100%
Clustered 8 filings across 5 jurisdictions · filing window Jul 10, 2023 → Aug 11, 2023. View entity profile → Other incidents for this victim →
incident inc_06f7b6c45e984513 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
DE HI NH OR VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
8 filings across 5 jurisdictions · Jul 10, 2023 – Aug 11, 2023 · 2 milestones
May 29, 2023 → May 30, 2023
When the intrusion reportedly occurred, per the linked filings
May 31, 2023 – Jun 28, 2023
Earliest reported discovery May 31, 2023
May 31, 2023
Reported by VERMONT AG, HAWAII AG, NEW HAMPSHIRE AG filings
Jun 2, 2023
Reported by DELAWARE AG filing
Jun 16, 2023
Reported by HAWAII AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Jun 28, 2023
Reported by OREGON AG filing
Pension Benefit Information, LLC (PBI) notified the Delaware Attorney General of a security event involving MOVEit Transfer software. A threat actor exploited a zero-day vulnerability to access PBI's servers on May 29-30, 2023, and exfiltrated data including names, partial addresses, SSNs, and DOBs of 1,604 Delaware residents. PBI patched systems, engaged forensic specialists, and offered 24 months of credit monitoring via Kroll. Notification to residents began July 12, 2023.
Affected (this filing): 1,604
Pension Benefit Information, LLC (PBI) disclosed a data breach stemming from the MOVEit Transfer vulnerability exploited by an unauthorized third party on May 29-30, 2023. PBI, which provides audit and address research for Fidelity Investments, confirmed that an attacker downloaded data containing PII and government IDs. PBI patched servers, investigated, and is offering 24 months of credit monitoring. No specific total count was provided in the Vermont filing, though a Rhode Island attachment noted ~1,772 impacted residents.
Pension Benefit Information, LLC (PBI) disclosed a data breach stemming from the MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, affecting individuals whose full name, SSN, DOB, contract number, and zip code were accessed. PBI patched systems, offered credit monitoring via Kroll, and enhanced security policies. No identity theft was known at the time of notice.
Pension Benefit Information, LLC (PBI) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-27. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/28/2023. 2,373,076 individuals were affected. Notice was sent on 7/14/20237/17/20237/18/20237/19/2023.
Affected (this filing): 2,373,076
Pension Benefit Information, LLC (PBI) disclosed a third-party software event involving the MOVEit Transfer vulnerability exploited by an unauthorized third party on May 29-30, 2023. PBI confirmed that information concerning a limited number of consumers was accessed and downloaded. PBI offered 12 months of complimentary identity monitoring through Kroll.
Pension Benefit Information, LLC (PBI), a third-party administrator for Washington National Insurance Company, experienced a data breach via a zero-day vulnerability in Progress Software's MOVEit Transfer software. An unauthorized third party accessed PBI's server on May 29-30, 2023, and downloaded data. PBI patched the vulnerability and notified Washington National, which notified 8 New Hampshire residents on August 3, 2023. Credit monitoring was offered.
Affected (this filing): 8
Pension Benefit Information, LLC (PBI) notified Hawaii AG that a third-party software vulnerability in Progress Software's MOVEit Transfer was exploited by an unauthorized third party. The attacker accessed PBI's MOVEit Transfer servers on May 29-30, 2023, downloading data containing names and other elements. PBI patched servers, investigated, and is offering 24 months of credit monitoring. No identity theft reported.
Pension Benefit Information (PBI) notified the NH Attorney General of a security event involving approximately 5 NH residents. A threat actor exploited a zero-day vulnerability in Progress Software's MOVEit Transfer software, accessing PBI servers on May 29-30, 2023, and exfiltrating data. PBI patched systems, investigated, and is offering credit monitoring via Kroll. Notification was sent on August 10, 2023.
Affected (this filing): 5