On or around May 29-30, 2023, an unauthorized third party exploited a zero-day vulnerability (CVE-2023-34362) in Progress Software's MOVEit Transfer software, accessed by third-party vendor Pension Benefit Information, LLC (PBI). PBI stored data for client Trane Technologies. The actor downloaded personal information, including names, addresses, dates of birth, and Social Security numbers, of one Idaho resident. Trane Technologies and Milliman notified the Idaho Attorney General on August 18, 2023, and offered 24 months of credit monitoring.
Affected (this filing): 1