Clustered 5 filings across 5 jurisdictions · filing window Jul 18, 2023 → Jul 24, 2023. View entity profile → Other incidents for this victim →
incident inc_bea148f5b3da4048 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Identity (basic) · Government ID
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA ME MT NH VT
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
May 29, 2023 → May 30, 2023
When the intrusion reportedly occurred, per the linked filings
Jun 6, 2023
Reported by MAINE AG, NEW HAMPSHIRE AG filings
Jul 18, 2023
Reported by VERMONT AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Teachers' Retirement System of the City of New York notified Vermont AG that a third-party vendor, PBI Research Services, experienced a data breach via a MOVEit Transfer vulnerability. Attackers accessed data on May 29-30, 2023. Affected data included names, SSNs, DOBs, and addresses for TRS payees receiving benefits as of March 2023. PBI engaged law enforcement and offered 24 months of credit monitoring.
The Teachers' Retirement System of the City of New York reported a data breach affecting 86 Maine residents. The breach, which occurred between May 29 and May 30, 2023, was discovered on June 6, 2023. The incident was described as an external system breach (hacking) that compromised names and Social Security numbers. Affected individuals were notified on July 18, 2023, and offered 24 months of credit monitoring services through Kroll.
Affected (this filing): 86
Teachers’ Retirement System of the City of New York (TRS NYC) notified the NH AG of a data breach involving third-party vendor PBI Research Services. An unauthorized party exploited a vulnerability in PBI's MOVEit Transfer software on May 29-30, 2023, downloading data of TRS payees. PBI notified TRS on June 6, 2023. Affected data included names, SSNs, and benefit info. TRS and PBI are offering credit monitoring.
Teachers' Retirement System of the City of New York reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-24. The breach occurred from 5/29/2023 to 5/30/2023. 11 Montana residents were affected.
Affected (this filing): 11
The Teachers' Retirement System of the City of New York (TRS) notified members that their personal information was exposed in a data security incident affecting third-party vendor PBI Research Services. An unauthorized third party exploited a previously unknown vulnerability in the MOVEit Transfer application to download data from PBI's servers on May 29-30, 2023. Affected data included names, Social Security numbers, dates of birth, and addresses. TRS systems were not compromised. TRS is offering 24 months of credit monitoring and identity restoration services.