American Civil Liberties Union Foundation data breach (2023)

Breach window

May 29, 2023 → May 30, 2023

When the intrusion reportedly occurred, per the linked filings

Breach discoveredletter-grounded

Jun 22, 2023

Reported by NEW HAMPSHIRE AG, VERMONT AG filings

⛰️New Hampshire State AGFirst filinglinked via multistate filing link · 100%

Filed Jul 19, 2023bd_c685c3c5e024f466

ACLU Foundation notified NH AG of a breach involving third-party vendor Pension Benefit Information (PBI). PBI exploited a vulnerability in MOVEit Transfer software on May 29-30, 2023, exfiltrating PII of 575 donors/beneficiaries. ACLUF learned of the incident on June 22, 2023. Notifications sent July 21, 2023. 11 NH residents affected. PBI offered 24 months credit monitoring.

Affected (this filing): 575

🍁Vermont State AGMost recent

Filed Jul 21, 2023bd_a01244c735ad0856

American Civil Liberties Union Foundation, Inc. notified Vermont AG of a data breach involving its third-party vendor, Pension Benefit Information, LLC. Attackers exploited a vulnerability in MOVEit Transfer software to access donor data (names, DOB, SSN) on May 29-30, 2023. 575 individuals affected. PBI patched the vulnerability and offered 24 months of credit monitoring.

Affected (this filing): 575

VT AG >14 bday

American Civil Liberties Union Foundation

Litigation Timing

Sensitive data

Timeline