Wilton Reassurance Life Company said it suffered a major data breach that compromised the sensitive personal information of more than 1.2 million customers.

Connecticut-based Wilton Reassurance (Wilton Re) is an insurance company that provides life insurance, reinsurance services, and other related risk-management services to companies across the United States.

The company recently filed a notice of data breach with the Office of the Maine Attorney General, but is yet to provide a sample of the data breach notice sent to affected customers. While the insurance company is yet to share details of the security incident, it has shared a notice of data breach that the Pension Benefit Information (PBI) filed with the Attorney General’s office.

Pension Benefit Information (PBI) has one of the largest and most comprehensive obituary databases and claims to provide thousands of organisations with the best population management solutions in the industry.

Last month, PBI said that it used Progress Software’s MOVEit file transfer application to send and receive data from some of its clients and was affected by malicious exploitation of a zero-day vulnerability in the file transfer software.

PBI launched an internal investigation with assistance from third-party cyber security experts to understand whether the vulnerability exploitation has impacted its systems or data.

“The investigation determined that a threat actor exploited a zero-day vulnerability, accessed one of PBI’s MOVEit Transfer servers on May 29, 2023, and May 30, 2023, and exfiltrated certain data from that MOVEit Transfer server during that time,” PBI said.

PBI initially revealed in a filing with the office of the Maine Attorney General that about 371,359 individuals were affected by the data security incident. The company later said in a separate filing with the US Department of Health and Human Services Office for Civil Rights that the incident impacted at least 1,209,825 individuals.

Wilton Re is among several companies that conduct business with PBI Research Services and were affected by the security incident. According to the filing with the Office of the Attorney General of Maine, Wilton Re discovered the data breach on June 7 and learned that the sensitive personal information of its customers, including their names and Social Security Numbers, was compromised.

The filing also confirms that at least 1,227,060 individuals have been affected by the data breach. The company is providing a year of complimentary credit monitoring and identity theft protection services via Kroll to all impacted individuals whose data has been compromised during the incident.