New York Life Insurance Company customers are among the 40 million people exposed in the data breach involving the MOVEit file transfer program.
The group is the latest to join the lengthy roster of victims who had their personal information, including Social Security numbers, stolen during the now global cyberattack.
In a notice to the office of the Maine attorney general, New York Life says 25,685 of its customers were compromised during the hack between May 29 and May 30.
Like other companies, New York Life works with Pension Benefit Information (PBI), who utilizes MOVEit services from Progress Software Corporation (PSC) to transfer sensitive personal information. Officials are now pointing to a Russian group named Clop as the hackers who stole the data after discovering a security vulnerability in the transfer system.
As a result of the attack, New York Life is offering its clients 12 months of Kroll Identity Monitoring services, along with access to Kroll fraud specialists and licensed investigators. Other groups have offered between 12 to 24 months of identity theft protection for victims.
New York Life now joins over 600 affected institutions including the California Public Employees’ Retirement System (CalPERS), the Tennessee Consolidated Retirement System (TCRS) and TIAA, all whom were impacted by the widespread breach in May.
Litigation following the cyberattack
Nearly three months since the incident, victims are now filing lawsuits against corporations for exposing them to the MOVEit software breach. A former TIAA employee filed a class-action lawsuit against the organization earlier this month, accusing the organization of unproperly securing and safeguarding his personally identifiable information (PII).
Just this week, consumer-rights law firm Hagens Berman filed five nationwide class-action lawsuits against PSC, claiming the organization compromised the sensitive personal information, including medical records, banking information, Social Security numbers, and more, of tens of millions of people.
SEE ALSO:
- TIAA Sued For MOVEit Cyber Hack
- Cybersecurity Breach Impacts 769,000 CalPERS Retirees
- Data Breach Impacts Nearly 172,000 Tennessee Retirees