F500 Insurance Carriers · Insurance: Property and Casualty (Stock) · Data breach
Hartford Insurance
Headline
The 2023 breach came through PBI Research Services, a vendor used across the life insurance and retirement industry to identify deceased policyholders and locate beneficiaries.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The 2023 breach came through PBI Research Services, a vendor used across the life insurance and retirement industry to identify deceased policyholders and locate beneficiaries. That is worth sitting with: the vendor's entire function is matching customer records against death data, so the dataset it holds is unusually complete by design, and it served many unrelated carriers at once. Beneficiaries exposed in that incident frequently had no relationship with any of the companies involved - they were named by someone else.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual policyholder agreements.
Data sharing
CONFIRMED 2023 BREACH via THIRD-PARTY VENDOR (PBI Research Services, using the widely-exploited MOVEit file-transfer software — the same underlying vulnerability documented for Delta Dental and numerous other companies throughout this tracker): cybercriminals infiltrated PBI's MOVEit system May 29-30, 2023, compromising Hartford Life and Accident Insurance customers' names, birthdates, and Social Security numbers. The resulting class action alleges Hartford took MORE THAN TWO MONTHS to notify affected individuals after learning of the incident in late May, and that the notification letter provided only 'basic details' without explaining how the breach occurred or what protective measures were being taken — the suit calls Hartford's offered 2-year identity-monitoring subscription 'wholly inadequate' given the lifelong fraud risk from exposed SSNs. This case is part of the LARGER consolidated MOVEit MDL (multidistrict litigation) also naming TIAA, Union Bank and Trust, and dozens of other institutions as co-defendants.
Fees and billing
SEPARATE, UNRELATED LITIGATION: Hartford Fire Insurance Co. and Hartford Casualty Insurance Co. sued data broker Data Axle (D. Neb., filed May 6, 2026) seeking a declaration that they owe NO defense or coverage under 2023-24 general-liability and umbrella policies for a separate class action (Quaid v. Data Axle, N.D. Ill.) accusing Data Axle of using people's identities without written consent to promote its paid subscriptions — Hartford here is a PLAINTIFF disputing its OWN obligation to cover a different company's alleged privacy violation, not a direct consumer-facing issue.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy thehartford.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service thehartford.com/legal-notice | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.