On July 20, 2023, Fidelity & Guaranty Life Insurance Company filed a notice of data breach with the Attorney General of Maine after discovering that one of the company’s vendors, Pension Benefit Information, LLC, experienced a MOVEit-related data breach. In this notice, F&G explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and Social Security numbers. Upon completing its investigation, Pension Benefit Information began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Pension Benefit Information, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the F&G Annuities & Life data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting F&G Annuities & Life Customers?

The F&G Annuities & Life data breach was only recently announced, and more information is expected in the near future. However, F&G’s filing with the Attorney General of Maine provides some important information on what led up to the breach. F&G’s filing contains a sample data breach letter prepared by Pension Benefit Information, LLC (“PBI”).

According to this source, F&G relies on the services of PBI, which serves as a third-party vendor, providing audit and address research services. In order to allow PBI to perform these contracted services, F&G provides PBI with confidential information about its customers.

PBI uses MOVEit, a file sharing program developed by Progress Software. On May 31, 2023, Progress Software disclosed a vulnerability in MOVEit that had been exploited by an unauthorized third party. In response, PBI launched an investigation into the incident on behalf of F&G.

The PBI investigation confirmed that an unauthorized party accessed PBI’s MOVEit servers on May 29, 2023 and May 30, 2023, and downloaded data, including some confidential information belonging to F&G customers.

After learning that sensitive consumer data was accessible to an unauthorized party, PBI reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name and Social Security number.

On July 28, 2023, Pension Benefit Information will begin sending out data breach letters on behalf of F&G to all F&G customers who were affected by the recent data security incident. These letters should provide victims with a list of which information of theirs was compromised.

More Information About Fidelity & Guaranty Life Insurance Company

Founded in 1959, Fidelity & Guaranty Life Insurance Company is a life insurance and annuity company based in Des Moines, Iowa. F&G serves more than 800,000 life insurance and annuity customers across the United States. F&G is a part of the Fidelity National Financial (NYSE: FNF) family of companies. FNF is a Fortune 500 company that provides title insurance and settlement services to the real estate and mortgage industries. F&G Annuities & Life employs more than 370 people and generates approximately $711 million in annual revenue.