On July 17, 2023, Milliman Solutions, LLC filed a notice of data breach with the Attorney General of Maine after discovering that one of the company’s vendors, Pension Benefit Information, LLC experienced a data security incident involving the widely publicized file sharing application MOVEit. In this notice, Milliman Solutions explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and Social Security numbers. After working with its vendor and completing a thorough investigation, Milliman Solutions determined that the incident involved customers of MEMBERS Life Insurance Company, CMFG Life Insurance Company, and The Independent Order of Foresters.

If you receive a data breach notification from Milliman Solutions, Pension Benefit Information or your life insurance company, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Milliman Solutions data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Milliman Solutions?

The Milliman Solutions data breach was only recently announced, and more information is expected in the near future. However, Milliman Solutions’ filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, Milliman Solutions provides risk assessment services to clients, including life insurance companies. When Milliman Solutions needs to verify whether a consumer has passed away, Milliman Solutions relies on the services of Pension Benefit Information (“PBI”). This requires Milliman Solutions to provide PBI with certain data about consumers.

On June 16, 2023, PBI informed Milliman Solutions that PBI had experienced a data security incident affecting the data of insurance companies that do business with Milliman Solutions. Evidently, PBI used MOVEit, a popular file-transfer service. Back in May 2023, MOVEit was discovered to have a critical vulnerability that allowed unauthorized parties to access the data on companies’ MOVEit servers.

After learning that sensitive consumer data was accessible to an unauthorized party, PBI reviewed the compromised files to determine what information was leaked and which consumers were impacted. Milliman Solutions then reviewed the data to confirm PBI’s findings. While the breached information varies depending on the individual, it may include your name and Social Security number.

In Milliman Solutions’ filing with the Maine Attorney General, the company notes that the PBI MOVEit breach affected the following insurance companies that do business with Milliman Solutions:

• MEMBERS Life Insurance Company,
• CMFG Life Insurance Company, and
• The Independent Order of Foresters.

As a result, 1,280,823 consumers who provided their information to these three insurance companies were affected by the breach.

On July 17, 2023, Milliman Solutions sent out data breach letters to anyone who was affected by the recent data security incident.

More Information About Milliman Solutions, LLC

Founded in 2016, Milliman Solutions, LLC is an insurance services business based in Seattle, Washington. The company provides a range of risk-assessment services to clients in multiple industries, including insurance companies.