DisclosureLens
State AGConfirmed2 filings · 2 statesLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Merged incident · 2 filings

TIAA and TIAA Life — October 2023 breach

Clustered 2 filings across 2 jurisdictions · filing window Sep 6, 2024 → Sep 27, 2024. View entity profile → Other incidents for this victim →

⚠ 1 cross-filing discrepancy →Merge100%

Determination

Confirmed

Members

2 filings

States

2

Affected · reported

8,977

First → last filing

Sep 6, 2024 → Sep 27, 2024

Merge confidence

100%

incident inc_c8d39472a0f7476e · merged by human · confidence 100%

Part of the INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024) — at least 16 organizations filed notifications naming this third party.
Confirmed breach. Merged as one breach: 2 regulatory filings. The filings describe hacking. Intrusion Oct 29, 2023–Nov 2, 2023. 8,977 individuals reported across the linked filings. Data reported: Government ID, PII, and Identity (basic). Each member filing remains the legal record for its jurisdiction.

Litigation Timing

Filing span
21days

Time between earliest and latest filing

Not recorded for this incident

Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.

The weekly clock on records like this one

The Disclosure Clock is a weekly briefing on what landed in the disclosure record, and the gap between the criminals' post and the regulator's filing — measured on the whole record, with the method shown.

Weekly. Double opt-in, one-click unsubscribe, and the address goes nowhere else.

TIAA and TIAA Life data breach (2023) — California and Maine filings, September 2024 · DisclosureLens