Constancy Investments, Financial institution of America, Corebridge Monetary and others didn’t correctly safe and safeguard customers’ personal info, in accordance with a brand new lawsuit arising from the huge MOVEit software program knowledge breach.

Plaintiff Frank W. Cooper, in a proposed class-action criticism filed Sept. 7 in U.S. District Courtroom in Massachusetts, additionally sued F&G Annuities & Life and two different firms affected by the breach: Pension Profit Data, which does enterprise as PBI Analysis Providers, and MOVEit proprietor Progress Software program Corp.

The hack, which occurred in late Could, touched lots of of firms, together with quite a few monetary companies companies, and tens of thousands and thousands of customers worldwide, subsequently spawning a number of lawsuits.

The breach occurred when a Russian ransomware gang exploited a weak point in MOVEit, a Progress Software program software that quite a few organizations use to switch information containing delicate knowledge.

The assault reached many firms by PBI Analysis Providers, which has mentioned it makes use of MOVEit to assist monetary companies decide whether or not account holders are alive and discover beneficiaries. PBI was one of many firms whose knowledge the gang accessed and stole, together with private knowledge belonging to Cooper and thousands and thousands of others, the swimsuit says.

Constancy Investments Institutional Operations, Financial institution of America, Corebridge and F&G Annuities & Life entrusted tens of 1000’s of customers’ personally identifiable info, together with Cooper’s, to PBI and Progress Software program, in accordance with the criticism. This included names, addresses, start dates, cellphone numbers and Social Safety numbers, the lawsuit says.

PBI managed Cooper’s private knowledge as a result of it processes info for his retirement and annuity plans, in accordance with the swimsuit. In July, PBI knowledgeable Cooper and different Constancy prospects concerning the knowledge breach involving MOVEit’s software program, the criticism notes.

PBI notified these prospects that it offers audit and address-research companies for Constancy Investments, which offers administrative companies for retirement plans at Financial institution of America, the place Cooper beforehand labored.

In Financial institution of America’s position as Cooper’s pension plan sponsor, the corporate offered his private knowledge to Constancy and PBI, in accordance with the criticism, which highlights the community of company connections that allowed the hack to succeed in so many organizations and customers.

Cooper additionally as a deferred mounted annuity with F&G and a hard and fast annuity contract with Corebridge Monetary, in accordance with the swimsuit.