Global Atlantic

The Global Atlantic Financial Group LLC (GAFG) disclosed a cybersecurity incident involving its third-party vendor, Pension Benefits Information LLC (PBI). PBI's MOVEit file transfer application was exploited via an unpatched vulnerability (zero-day at the time) between May 29-30, 2023. Cybercriminals exfiltrated policyholder data, including names and government identifiers (SSNs, DOBs). GAFG notified affected individuals in July 2023, offering two years of credit monitoring. GAFG stated its own environment was not directly compromised.

The Global Atlantic Financial Group LLC notified California residents of a data breach involving a third-party vendor, Pension Benefits Information LLC (PBI). Cyber criminals exploited an unknown vulnerability in PBI's MOVEit file transfer application, accessing data on May 29-30, 2023. Global Atlantic was notified on June 7, 2023. The incident impacted policyholder data, including personal identifiable information. The company engaged experts, reported to authorities, and offered two years of Experian IdentityWorks to affected individuals.