Forrester Research, Inc. notified Vermont AG of a data breach affecting employee data. The breach originated from a third-party vendor, Pension Benefit Information (PBI), which uses MOVEit Transfer software. Cybercriminals exploited a vulnerability in MOVEit to access data including names, DOBs, SSNs, and state/zip codes. Forrester confirmed PBI remediated the vulnerability and is offering 2 years of credit monitoring and identity theft restoration.