Skip to main content
A white-haired woman looks at her computer with concern as she realizes her important online data was breached.

Teachers Insurance and Annuity Association of America Data Breach

Written by Joseph Lyon on . Posted in Data Breach.

The Lyon Firm is investigating the MOVEit ransomware attack that resulted in the data breach of over 90 million individuals and thousands of organizations globally. PBI Research was one of the impacted entities, which trickled down to several other companies that used the PBI services, including Teachers Insurance and Annuity Association of America (TIAA). Contact our data privacy attorneys if you are a victim of the data theft incident and are interested in joining the class action lawsuit. 

What Happened at TIAA?

Following the massive MOVEit transfer cyberattack, Teachers Insurance and Annuity Association of America (TIAA) notified the Maine Attorney General that 2,630,717 of their clients’ consumers had been affected by the attack, which also hit PBI Research. PBI receives personal data of individual participants and clients for insurance companies and matches them against death notices and obituaries to assist TIAA and others in death claim and beneficiary processes.

PBI notified TIAA that a vulnerability in one of their MOVEit Transfer servers allowed TIAA data to be accessed and stolen by an unauthorized third party. Personal information included in the data breach include first and last names, addresses, dates of birth, social security numbers, and gender.

Whose Data was Compromised?

  • Participants with a TIAA plan account balance greater than $0.00 who have not made a
    contribution to their TIAA plan account in the last 90 days
  • Former employees who contributed to their TIAA plan in the past (included because
    such participants still have a TIAA plan account balance).
  • Current employees who used to, but are not currently, contributing to their TIAA
    plan account.
  • Participants who are receiving retirement income from some but not all of their TIAA plan
    account assets.
  • Participants who are receiving retirement income payments, even though they may
    currently be contributing to their TIAA plan account.

Contact our data breach lawyers if you or a loved one has received a data breach notification letter from TIAA or another company embroiled in the Progress Software MOVEit attack. You may be eligible to join the current class action lawsuit.