MILLIMAN, INC.

Milliman, a professional services firm, disclosed a data breach affecting approximately 100,000 Vermont consumers. The incident resulted from a supply-chain compromise of Progress Software's MOVEit transfer application. Attackers exploited the vulnerability to exfiltrate customer data, including names, Social Security numbers, and financial account information. Milliman engaged forensic investigators and offered 24 months of credit monitoring to affected individuals.

Affected (this filing):

Milliman, Inc. reported an external system breach (hacking) occurring on May 29, 2023, discovered on May 30, 2023. The incident affected 56,457 individuals, including 224 Maine residents. Personal Identifiable Information (PII) compromised included names and Social Security Numbers. Milliman issued written notifications and provided 4 months of identity and credit monitoring through Kroll.

Affected (this filing): 56,457