Only 12 of these victims have confirmed the number of people affected, which already adds up to more than 16 million individuals. Department of Health and Human Services (HHS) and Siemens Energy. The mass-hack has so far claimed more than 160 victims, according to Emsisoft threat analyst Brett Callow, including the U.S. “We have not observed any related unusual activity from this event involving TIAA accounts.” “No information was obtained from TIAA’s systems and TIAA systems were not at risk from the MOVEit Transfer vulnerability,” Peterson said.

The vendor, named as Pension Benefit Information (PBI), is used by TIAA for auditing and beneficiary location services. In a statement given to TechCrunch, TIAA spokesperson Chad Peterson confirmed said that the organization wasn’t directly impacted by MOVEit, but was also impacted by a breach at one of its third-party vendors using MOVEit Transfer. According to its website, TIAA serves mire than five million active and retired employees participating at more than 15,000 institutions and manages $1.3 trillion in assets in more than 50 countries.īoth of the security notices confirm that TIAA was affected by hackers’ widespread exploitation of a flaw in MOVEit Transfer, an enterprise file transfer tool developed by Progress Software.

Middlebury College in Vermont and Trinity College in Connecticut both released security notices confirming they experienced data breaches as a result of a security incident at the Teachers Insurance and Annuity Association of America, or TIAA. schools have confirmed that TIAA, a nonprofit organization that provides financial services for individuals in academic fields, has been caught up in the mass-hacks targeting MOVEit file transfer tools.

Data dredging/p-hacking