2023 Willis Towers Watson — Pension Benefit Information MOVEit / Cl0p vendor breach
Data compromised
Names and SSNs mirrored in Maine breach-index summaries tied to WTW / Acclaris reporting lines
Technical writeup
WTW's U.S. notices explained that address-audit vendor Pension Benefit Information, LLC lost control of a MOVEit Transfer node during the May 2023 Cl0p zero-day wave, exposing names and Social Security numbers for nearly 1,800 individuals in Maine-filed samples. Corporate client guidance mirrored Progress Software remediation advice while substitute letters and credit-monitoring offers flowed in July 2023.
Root cause
CVE-2023-34362 exploitation against a third-party MOVEit Transfer deployment