On June 28, 2023, Talcott Resolution Life Insurance Company (“Talcott”) filed notice of a third-party data breach with the Attorney General of Maine after learning that one of Talcott’s vendors, PBI Research, was affected by the MOVEit data breach. On the Maine AG’s site, Talcott explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and Social Security numbers. However, Talcott also explains that PBI Research, which is the company that experienced the breach, will be notifying affected parties once the company’s investigation is complete.

If you received a data breach notification from PBI Research on behalf of Talcott Resolution Life Insurance Company, it is essential you understand what is at risk and what you can do about it. It is imperative that you carefully review this letter, even if you are unfamiliar with PBI Research, as it may be the only notice of the breach you receive. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following this incident. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Talcott Resolution Life Insurance Clients?

The incident involving Talcott Resolution Life Insurance was only recently announced, and more information is expected in the near future. However, Talcott’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, the incident occurred on May 29, 2023, and involved a zero-day vulnerability within the MOVEit file transfer software used by PBI Research. However, it was not until June 4, 2023, that PBI Research was alerted to the vulnerability.

In response, PBI Research launched an investigation to determine what, if any, consumer data was impacted as a result of the MOVEit vulnerability. This investigation confirmed that data pertaining to 552,821 individuals who had previously provided their information to Talcott was accessible by the hackers who carried out the attack.

After learning that sensitive consumer data was accessible to an unauthorized party, PBI Research reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name and Social Security number.

On June 28, 2023, Talcott Resolution Life Insurance filed notice of the incident with the Maine Attorney General. Based on this notice, it appears that PBI Research plans on sending out the data breach letters on or around July 18, 2023.

More Information About Talcott Resolution Life Insurance Company

Founded in 2018, Talcott Resolution Life Insurance Company is a life insurance and annuity company based in Windsor, Connecticut. Originally a part of The Hartford, Talcott was sold to a group of investors in May 2018. Currently, Talcott administers roughly one million contracts and has $90 billion in pro-forma assets under management. Talcott Resolution Life Insurance employs more than 440 people and generates approximately $1.6 billion in annual revenue.