💎Delaware State AG
Clustered 9 filings across 7 jurisdictions · filing window Jul 14, 2023 → Aug 17, 2023. View entity profile → Other incidents for this victim →
incident inc_9ecdc1e131254995 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Identity (basic) · Government ID
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA DE HI ME MT NH WA
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
9 filings across 7 jurisdictions · Jul 14, 2023 – Aug 17, 2023 · 2 milestones
May 29, 2023 → May 30, 2023
When the intrusion reportedly occurred, per the linked filings
May 29, 2023 – Jun 28, 2023
Earliest reported discovery May 29, 2023
May 29, 2023
Reported by DELAWARE AG, HAWAII AG filings
May 31, 2023
Reported by CALIFORNIA AG, NEW HAMPSHIRE AG filings
Jun 9, 2023
Reported by WASHINGTON AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Jun 28, 2023
Reported by MAINE AG filing
Pension Benefit Information, LLC (PBI), a third-party vendor for Teachers Insurance and Annuity Association of America (TIAA), disclosed a MOVEit Transfer vulnerability exploited by an unauthorized third party. The incident occurred May 29-30, 2023, involving the exfiltration of names, SSNs, DOBs, addresses, and gender. PBI patched servers, investigated, and offered 24 months of Kroll identity monitoring. No identity theft or fraud has been indicated.
Pension Benefit Information, LLC (PBI) notified Delaware AG that a third-party software vulnerability in Progress Software's MOVEit Transfer was exploited between May 29-30, 2023. PBI, a vendor for Teachers Insurance and Annuity Association of America (TIAA), allowed an unauthorized third party to access a server and download data. Affected data included names, SSNs, dates of birth, addresses, and gender. PBI patched servers, investigated, and offered 24 months of identity monitoring via Kroll. No identity theft or fraud has been indicated.
Teachers Insurance and Annuity Association of America (TIAA) notified the California AG of a data breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software, accessing PBI servers on May 29-30, 2023, and downloading data. Affected information includes names, Social Security numbers, dates of birth, addresses, and gender. TIAA/PBI patched servers, investigated the incident, and offered 24 months of identity monitoring.
Teachers Insurance and Annuity Association of America reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-21. The breach occurred on 5/31/2023. 5,977 Montana residents were affected.
Affected (this filing): 5,977
Teachers Insurance and Annuity Association of America (TIAA) reported a data breach affecting 2,373,076 individuals, originating from a vulnerability in the MOVEit transfer software, a third-party vendor. The breach occurred on May 29, 2023, and was discovered on June 28, 2023. The compromised information includes names and Social Security numbers. TIAA offered affected individuals 24 months of identity theft protection services through Kroll.
Affected (this filing): 2,373,076
Teachers Insurance and Annuity Association of America (TIAA) notified the California AG of a data breach involving its third-party vendor, Pension Benefit Information, LLC (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer software, accessing PBI's servers on May 29-30, 2023, and downloading data. Affected information includes names, Social Security numbers, dates of birth, addresses, and gender. TIAA/PBI patched servers, investigated the incident, and offered 24 months of identity monitoring via Kroll.
Teachers Insurance and Annuity Association of America ("TIAA, a finance sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-09 and filed notice on 2023-07-27. 56,331 Washington residents were affected. 48 days elapsed between awareness and notification. 11 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 56,331
Pension Benefit Information, LLC (PBI) notified TIAA customers of a data breach involving the MOVEit Transfer software vulnerability exploited in May 2023. PBI confirmed unauthorized access to a server on May 29-30, 2023, resulting in the exfiltration of names, SSNs, DOBs, addresses, and gender. PBI patched systems, offered 24 months of Kroll identity monitoring, and enhanced security policies.
Pension Benefit Information, LLC (PBI), a third-party vendor for TIAA, disclosed a MOVEit Transfer vulnerability exploitation. An unauthorized third party accessed PBI servers on May 29-30, 2023, downloading data. PBI patched servers, investigated, and is offering 24 months of Kroll identity monitoring. No identity theft confirmed.