TIAA and TIAA Life

The Maine Office of the Attorney General reported a data breach involving TIAA and TIAA Life on September 27, 2024. The breach occurred between October 29, 2023, and November 2, 2023, due to external system breach (hacking), affecting a total of 8,977 individuals, with 81 residents specifically impacted. Identity theft protection services were offered to affected individuals for 24 months through Kroll.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3eeabb0b-0678-448b-96d2-63c3d49b094b.html

TPRM report: https://www.rankiteo.com/company/tiaa

"id": "tia904072625",
"linkid": "tiaa",
"type": "Breach",
"date": "10/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 8977,
                        'industry': 'Finance',
                        'name': 'TIAA and TIAA Life',
                        'type': 'Financial Services'}],
 'attack_vector': 'External System Breach (Hacking)',
 'data_breach': {'number_of_records_exposed': 8977},
 'date_detected': '2024-09-27',
 'date_publicly_disclosed': '2024-09-27',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving TIAA and TIAA Life on September 27, 2024. '
                'The breach occurred between October 29, 2023, and November 2, '
                '2023, due to external system breach (hacking), affecting a '
                'total of 8,977 individuals, with 81 residents specifically '
                'impacted. Identity theft protection services were offered to '
                'affected individuals for 24 months through Kroll.',
 'impact': {'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2024-09-27',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': 'Kroll'},
 'title': 'TIAA and TIAA Life Data Breach',
 'type': 'Data Breach'}