Completed Data Breach Investigations

Pan-American Life Insurance Group announced that consumers' personal information was exposed in May 2023 during a data breach that targeted the MOVEit file transfer software.

Zeroed-In Technologies, a data analytics firm, reported an August 2023 data breach affecting nearly 2 million individuals, including applicants and current and former employees of its clients.

NSC Technologies is notifying employees and applicants that their personal information was exposed in a data breach it experienced in June 2023.

Clear Spring Life and Annuity Company has reported that personal information belonging to those associated with its annuity contracts and life insurance policies may have been exposed in a February 2023 ransomware attack.

More than 8 million people may have had personal - and, in some cases, medical and health information - exposed in a data breach involving MOVEit and announced by Welltok.

In November 2023, Pahl & McCay announced that consumers’ names, addresses and Social Security numbers were exposed in a security data incident.

AutoZone reported in November 2023 that almost 185,000 customers had their personal information exposed in the massive MOVEit data breach.

Medical College of Wisconsin reported that patients' personal and medical information was exposed during the massive MOVEit data breach in May 2023.

Current and former Okta employees, as well as their dependents, may have had their personal information exposed in a September 2023 data security incident.

Rusnak Auto Group announced a data breach that may have exposed consumers' names and Social Security numbers between June 13 and June 16, 2023.

Tri Counties Bank reported that in February 2023, an unauthorized party may have gained access to personal information belonging to customers and employees, among others.

MESVision and Gerber Life Insurance Company are sending notices to nearly 27,000 individuals whose personal and health insurance information may have been exposed in a 2023 data breach affecting a widely used file transfer system known as MOVEIt.

Medical Eye Services (which does business as MESVision) announced a May 2023 data breach that may have compromised the personal information of its vision insurance plan participants.

Northwell Health has confirmed that it its patients' personal and medical information was exposed in a data breach affecting third-party vendor Perry Johnson & Associates, Inc.

The International Association of Sheet Metal, Air, Rail and Transportation Workers (SMART) reported that private data belonging to over 62,000 individuals was exposed in a data breach discovered in early September.

Financial Asset Management Systems is reporting a late March 2023 security incident that allowed certain information stored on its network to be obtained by an unauthorized party.

Kyocera AVX reported that over 39,000 individuals may have had their full names, Social Security numbers and other information exposed in a data breach it experienced between February 16 and March 30, 2023.

Hawkins Delafield & Wood LLP has reported a data security incident that may have exposed names and Social Security numbers.

Greater Rochester Independent Practice Association, a vendor for health providers and insurance plans, reported that over 279,000 individuals' information was exposed as part of the MOVEit data breach.

Cook County Health has confirmed that up to 1.2 million patients had their protected health information exposed during a data breach that affected one of the Illinois healthcare network's vendors.

Hilb reported in November 2023 that it experienced a data breach affecting over 81,000 individuals when an unauthorized party gained access to several employee email accounts.

Postmeds (which does business as TruePill) has reported that individuals' names and prescription information were revealed during a data breach that occurred between August 30 and September 1, 2023.

ProMach announced a data breach in October 2023 that may have compromised the personal and health information of current and former employees and potentially their beneficiaries and dependents.

Around October 27, 2023, Drug Free Workplaces began sending out notice of a data breach that reportedly impacted 37,705 individuals.

Progressive Leasing reported in late October that thousands of its customers and employees had their information exposed in a September 2023 data breach.

Sunflower Bank began notifying customers in September 2023 that their personal information was exposed in a data breach that targeted MOVEit.

Pension Benefit Information is notifying PHH Mortgage customers that their personal information may have been exposed in a massive data breach that targeted MOVEit in late May 2023.

Pension Benefit Information is notifying Athene policyholders of a data breach that may have compromised their personal information in late May 2023.

Pension Benefit Information reported in July 2023 that the massive MOVEit data breach exposed information belonging to customers affiliated with MassMutual Ascend and its subsidiaries.

Pension Benefit Information is notifying Nassau Life and Annuity customers that their personal information may have been exposed in the massive MOVEit data breach that occurred in late May 2023.

Pension Benefit Information reported in August 2023 that the massive MOVEit data breach impacted consumers affiliated with Consolidated Edison Company of New York (ConEd).

Taylored employees, as well as those working for related entities, may have had their personal information exposed in a data incident.

Radius reported in September 2023 that consumer information obtained through the company's collection efforts on behalf of its clients was exposed in the massive MOVEit data breach.

BHI Energy is notifying more than 90,000 individuals that their personal information may have been compromised after a hacker gained access to the company's network.

Jaco Oil Company reported on September 1, 2023 that files containing private data belonging to consumers had been copied from its computer network by an unauthorized individual.

Pension Benefit Information is sending data breach letters to insureds and prospective insureds of Standard Insurance Company whose personal information was compromised in a data breach.

On August 17, 2023, Blue Cross Blue Shield of Arizona reported that 47,485 people were affected by a data breach that impacted TMG Health, a company that provides data services to the insurer.

American National reported in August 2023 that customers' personal and medical information was exposed during the massive MOVEit data breach in late May.

A data breach at the National Student Clearinghouse has affected more than 50,000 individuals and potentially exposed names and Social Security numbers.

It’s been reported that thousands of individuals have been affected by a data security incident announced in September 2023 by Founder Project Rx, Inc., which does business as Encore Pharmacy.

A data breach at Mortgage Industry Advisory Corporation was reported on September 5, 2023 and affects nearly 9,000 individuals.

A data breach affecting Lifeline Systems Company was announced in September 2023 and may have exposed health and medical information.

A data breach experienced by Delaware Life Insurance Company in May 2023 has exposed private information belonging to its policy contract holders.

Data Media Associates began notifying patients in August 2023 that their personal and health information was exposed in a data breach it discovered in early June of this year.

On August 2, 2023, Acadia Health (Just Kids Dental) experienced a data breach that compromised patients' and employees' personal and health information.