The Vermont Dept. of Financial Regulation was notified that a large-scale data security breach has compromised the personally identifiable information of roughly 42,000 Vermonters and over 38 million consumers nationwide. The breach occurred when the CLOP Ransomware Gang, a known threat actor, infiltrated the MOVEit file transfer software used by many public and private businesses.
So far, 43 companies, regulated by the department or associated with regulated entities’ data, have reported data breaches related to the MOVEit file transfer software.
Many impacted entities were impacted through a third-party called PBI Research Services, Inc. (PBI). For most companies impacted, PBI has sent notices directly to impacted Vermonters. That letter will provide additional information about the breach and detail what personal information was implicated. The letter also provides a code to sign up for identity and credit protection.
The department encourages all Vermonters to remain vigilant against incidents of identity theft and fraud, to review account statements and to monitor your free credit reports for suspicious activity and to detect errors.
The known 43 companies include: American General Life Insurance Company, American National Group, Ameriprise Financial Athene Annuity and Life Company, Bank of Burlington, Darling Consulting Group, Elips Life Insurance Co., CMFG Life Insurance Company, Continental General Insurance Company, Corebridge Financial, Inc., Fidelity & Guaranty Life Insurance Company, Fidelity Life Association, Genworth North America Corporation, Hartford Life and Accident Insurance Company, Illumifin Corporation, Jackson National Life Insurance Company, Lombard International Life Assurance Company, Lumico Life Insurance Co., Mass Mutual Ascend, Members Life Insurance Company, Manhattan National Life Insurance Co., Milliman, New York Life Insurance Company, Northwestern Mutual, PBI Research Services, Inc., Progressive Software Services, Prudential Insurance Company of America, RiverSource Life Insurance Company, Sovos Compliance, LLC, Starmount Life Insurance Co., Sun Life and Health Insurance Company (U.S.), Sun Life and Health Insurance Company of Canada (U.S.), Talcott Resolution Life and Annuity Insurance Co. / Talcott Resolution Life Insurance Company, Teachers Insurance and Annuity Association of America, TIAA Kaspick, LLC, TIAA-CREF Life Insurance Company, Transamerica Life Insurance Company, Union Fidelity Life Insurance Company, Union Labor Life Insurance Company, Union Security Insurance Company, United Healthcare Student Resources, Unum Insurance, Wilton Reassurance Company.
As more info is available data may change.