Genworth reveals huge hit from global MOVEit hack
Summary
The long list of companies hit by the global MOVEit hack has grown further with the addition of insurance provider Genworth, whose millions of customers and agents combined are affected. In a statement, Genworth said: “We were recently notified by PBI Research Services (PBI) that specific Genworth files containing customer and agent information were compromised due to a cyberattack that took advantage of a vulnerability in the widely used MOVEit file transfer software that PBI uses.” PBI is a third-party vendor used by Genworth in scanning social security data to determine whether a policyholder may have passed and triggered death benefits under a life insurance policy or annuity contract. We are working to understand what personal information related to our group long-term care products may have been affected. “For policyholders, the exposed information includes social security number, name, date of birth, ZIP code, state of residence, and policy number. For agents, the exposed information includes the agent ID, name, date of birth, and full address.” Genworth confirmed that the information of “a very significant portion” of its customers across long-term care insurance, life insurance, and annuities was exposed via PBI while Genworth’s own information systems were not impacted as the company does not use the compromised software.