Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Milliman, Inc.
  • Street Address: 1301 5th Avenue, Suite 3800
  • City: Seattle
  • State, or Country if outside the US: Washington
  • Zip Code: 98101

Submitted By

  • Name: Daniel Greene
  • Title: Privacy Counsel
  • Firm name (if different than entity): Octillo Law PLLC
  • Telephone Number: 7168982102
  • Email Address: dgreene@octillolaw.com
  • Relationship to entity whose information was compromised: Privacy Counsel

Breach Information

  • Total number of persons affected (including residents): 56457
  • Total number of Maine residents affected: 224
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 05/29/2023
  • Date Breach Discovered: 05/30/2023
  • Description of the Breach:
    • Other, External system breach (hacking)
    • If other, please specify: Updated Number of Notified Residents: We are writing to provide an updated number of Maine residents that Milliman has notified in connection with this incident. Since our initial August 14, 2023 notice, Milliman further assessed PBI’s notification and, as a result, issued additional notifications, including for deceased individuals and re-mailing notices that were originally sent to addresses outside Maine, after those notices were returned with mail forwarding addresses in Maine. As a result, the total number of Maine residents to whom Milliman has issued notices now totals 224. Updated List of Milliman Clients: Please note that our initial August 14, 2023 notice included a list of potentially-affected Milliman clients based on aggregated, national data. After further review of each client’s specific data on a state-by-state basis, we included with this notice as Appendix A an updated list of Milliman clients to remove certain clients who do not meet the requirements for attorney general notification under Maine law, including Aflac, Inc.
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 01/12/2024
  • Copy of notice to affected Maine residents: 24.01.12 Notification Letter.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 4 months of identity monitoring and credit monitoring provided by Kroll