Pension Benefit Information

Disclosed Jul 10, 20231,866,694 affectedConfirmed

The business associate (BA), Pension Benefit Information, reported that its third-party vendor experienced a cyber incident that affected the protected health information (PHI) of 1,866,694 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, and health insurance and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected	1,866,694 (as reported to HHS)
Disclosed	Jul 10, 2023
Discovered	Jun 2, 2023
Happened	May 29, 2023
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Pension Benefit Information

Official noticeatg.wa.gov

Washington Attorney General breach notice: Pension Benefit Information

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Pension Benefit Information

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Pension Benefit Information

Official noticeago.vermont.gov

Vermont Attorney General: 2023-08-24 Pension Benefit Information Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2023-08-04 Pension Benefit Information Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2023-08-10 Pension Benefit Information Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2023-07-12 Pension Benefit Information Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2023 data breach report: Pension Benefit Information

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Pension Benefit Information (Business Associate, MN)

Notices filed

Residents of DEJul 10, 2023

Delaware DOJ1,604 people

Residents of CAJul 11, 2023

California AGCount not stated

Residents of WAJul 12, 2023

Washington AG18,856 people

Residents of ORJul 12, 2023

Oregon DOJ371,359 people

Residents of VTJul 12, 2023

Vermont AGCount not stated

Residents of INJul 12, 2023

Indiana AG14,857 people

TotalJul 14, 2023

HHS archive1,866,694 people

Residents of ORJul 27, 2023

Oregon DOJ2,373,076 people

Residents of ORJul 31, 2023

Oregon DOJ27,946 people

Residents of ORAug 2, 2023

Oregon DOJ42,922 people

Residents of CAAug 4, 2023

California AGCount not stated

Residents of VTAug 4, 2023

Vermont AGCount not stated

Residents of VTAug 10, 2023

Vermont AGCount not stated

Residents of INAug 10, 2023

Indiana AG170 people

Residents of CAAug 16, 2023

California AGCount not stated

Residents of CAAug 24, 2023

California AGCount not stated

Residents of VTAug 24, 2023

Vermont AGCount not stated

History of this record

sector2026-09-25

other to healthby backfillSource

data_types2026-09-25

["names"] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

371359 to 1866694by backfillSource

summary2026-09-25

empty to The business associate (BA), Pension Benefit Information, reported that its third-party vendor experienced a cyber incident that affected the protected health information (PHI) of 1,866,694 individuals. The PHI involved included names, Sociby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 371359by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-07-12-pension-benefit-information-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-08-04-pension-benefit-information-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-08-10-pension-benefit-information-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-08-24-pension-benefit-information-data-breach-notice-consumersby backfillSource

data_types2026-09-25

[] to ["names"]by backfillSource

disclosed2026-09-25

2023-07-11 to 2023-07-10by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2023-06-02by backfillSource

disclosed2026-09-25

2023-08-04 to 2023-07-11by backfillSource

disclosed2026-09-25

2023-08-16 to 2023-08-04by backfillSource

disclosed2026-09-25

2023-08-24 to 2023-08-16by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Pension Benefit Information