AMERICAN NATIONAL GROUP INC.

American National Group LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-09. The breach occurred during 5/28/2023 - 5/28/2023. The breach was discovered on 6/1/2023. 270,758 individuals were affected. Notice was sent on 8/11/2023.

Affected (this filing): 270,758

American National Group, LLC experienced a data security incident involving the MOVEit Transfer application. An unauthorized third party exploited a vulnerability (announced by Progress Software on May 31, 2023) to access systems on May 28, 2023 and exfiltrate customer data including names, SSNs, DOBs, addresses, and medical treatment information. American National took the application offline, engaged third-party advisors, notified law enforcement, and offered two years of credit monitoring. The incident status is contained.

American National Group, LLC, an insurance provider, disclosed a data security incident involving its MOVEit Transfer application. An unauthorized third party exploited a previously unknown vulnerability (CVE-2023-34362) to access systems and exfiltrate customer data, including names, SSNs, DOBs, addresses, and medical treatment information. The breach occurred on May 28, 2023. American National took the application offline, engaged third-party advisors, and notified law enforcement. Affected individuals were offered two years of complimentary credit monitoring through Experian.

American National Group, LLC notified Delaware AG of a data breach involving its MOVEit Transfer application. An unauthorized third party exploited a previously unknown vulnerability (zero-day) in the software to access systems on May 28, 2023, exfiltrating customer personal information including names, SSNs, DOBs, addresses, and medical treatment details. American National took the application offline, engaged third-party advisors, and notified law enforcement. Affected individuals were offered two years of complimentary credit monitoring via Experian.