Helpful Articles

Console & Associates, P.C.: Milliman Solutions, LLC Notifies Over 1.2 Million of Third-Party Data Breach Involving File-Transfer Program MOVEit

Milliman Solutions, LLC has reportedly become the latest victim of the MOVEit data breach. The MOVEit secure file transfer protocol had a serious day-one vulnerability in May 2023, and this has compromised numerous major companies as well as the data of several million consumers. This leak includes Social Security numbers, as well as names.

On July 17th, 2023, the conclusion of the internal Milliman data breach investigation led to the company reporting the details of the breach to the Attorney General of Maine. According to this report, Milliman Solution’s third-party vendor Pension Benefit Information, LLC (PBI) experienced a breach that compromised the data of 1.2 million customers. Since then, Milliman Solutions and PBI have dispatched letters of data breach notification to the victims with information on the stolen data and an offer of identity protection services.

If you receive a data breach notification, you should opt into identity protection services and read the letter to know what data was stolen. From there, follow the steps we’ve outlined in our Guide for Victims of Data Breaches and get in touch with a data breach lawyer. At the law firm of Console & Associates, P.C., we can help you uncover your legal options and consider a Milliman data breach lawsuit. Just call us at 866-778-5500 or send us an email to info@consoleandassociates.com and we’ll schedule a free consultation.

The Cause of the Milliman Solutions Data Breach

So far, the main source of information on the breach is the Milliman Solutions report with the Attorney General of Maine. While Milliman’s own network wasn’t violated, their vendor PBI suffered from a vulnerability in the MOVEit file transfer tool. This dates back to May 2023, when a day-zero vulnerability allowed hackers to access the data of companies that used the file transfer tool. Despite being detected and resolved quickly, the breach had far-reaching consequences that have impacted millions of consumers and counting.


Several weeks after the leak, PBI informed Milliman Solutions of the breach. This sparked an investigation into the compromised data from June 16th to July 17th, which sought to uncover the type of data stolen and the accounts affected. In the end, it turned out that 1.2 million customers had been affected and that matching pairs of names and Social Security numbers had been stolen. In particular, the data theft impacted three companies associated with Milliman Solutions:

?      MEMBERS Life Insurance Company

?      CMFG Life Insurance Company

?      The Independent Order of Foresters

Information on Milliman Solutions, LLC

Milliman Solutions, LLC is a Seattle-based insurance services business founded in 2016. The company provides a range of services to insurance agents as well as brokerages. If you entrusted your data to the company, it and its vendors have a duty to take reasonable precautions to safeguard your data.

If such safeguards weren’t in place or negligence otherwise contributed to the breach, you may be entitled to compensation for your time, money, and stress. Call 866-778-5500 or send us an email to info@consoleandassociates.com to schedule a free consultation with one of our Milliman data breach lawyers.

About the Author
Richard Console
Posted - 07/21/2023