Milliman Company Cyber Security Posture
milliman.comMilliman is among the world’s largest independent actuarial and consulting firms. Founded in Seattle in 1947, Milliman has offices in key locations worldwide. Through consulting practices in employee benefits, healthcare, investment, life insurance and financial services, and property & casualty/general insurance, Milliman serves the full spectrum of business, financial, government, union, education, and nonprofit organizations. In addition to consulting actuaries, Milliman’s body of professionals includes numerous other specialists, ranging from clinicians to economists.
Milliman Company Details
milliman
4285 employees
81712.0
541
Business Consulting and Services
milliman.com
Scan still pending
MIL_2174883
In-progress
Milliman Risk Score (AI oriented)Between 900 and 1000
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
Milliman Global Score.png)
Milliman Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 900 and 1000 |
Milliman Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Milliman | Data Leak | 85 | 3 | 07/2023 | MIL24124723 | Link | |
Rankiteo Explanation : Attack with significant impact with internal employee data leaksDescription: Many schools and universities received benefits for university staff retirement through the Teachers Insurance and Annuity Association of America ("TIAA"). The TIAA portion of the intrusion did not directly target the vendor's computer systems. Pension Benefit Information, TIAA's vendor, informed TIAA that the intrusion had affected PBI. PBI informed HHS that 1,209,825 patients or insurance holders of its HIPAA-covered clients had been impacted, while Milliman Solutions informed the Maine Attorney General's Office that the attack on PBI had affected 1,280,823. At CalPers, Genworth Financial, and Wilton Reassurance, an estimated extra 5 million people have been impacted, according to earlier press reports. Even yet, they do not represent an exhaustive list or an estimate of all the clients of PBI whose consumers were impacted. They took it seriously and took preventive steps to secure it. PIB also offered access to 24 months of complimentary identify monitoring services through Kroll. | |||||||
| Milliman | Ransomware | 100 | 4 | 11/2023 | MIL45181223 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: The MOVEit Transfer file transfer platform, created by Progress Software Corporation, was the subject of a recent, major hacking effort by the Cl0p ransomware group, according to alarming information disclosed by cybersecurity firm Emsisoft. The analysts estimate that 60,144,069 people and about 1,000 organisations were affected by the attacks. The Cl0p group's leak site, state breach reports, SEC filings, and other public disclosures are the sources of the data. The attacks affected tens of millions of people, according to the experts. Maximus, Pôle emploi, Louisiana Office of Motor Vehicles, Colorado Department of Health Care Policy and Financing, Oregon Department of Transportation, Teachers Insurance and Annuity Association of America, Genworth, PH Tech, and Milliman Solutions are the organisations with the greatest number of affected persons. | |||||||
Milliman Company Subsidiaries
Milliman is among the world’s largest independent actuarial and consulting firms. Founded in Seattle in 1947, Milliman has offices in key locations worldwide. Through consulting practices in employee benefits, healthcare, investment, life insurance and financial services, and property & casualty/general insurance, Milliman serves the full spectrum of business, financial, government, union, education, and nonprofit organizations. In addition to consulting actuaries, Milliman’s body of professionals includes numerous other specialists, ranging from clinicians to economists.
Access Data Using Our API
Get company history
Rapid.png)
Milliman Cyber Security News
MOVEit attack victim count surpasses 1,000 organizations
The number of organizations hit by the wide-scale attack increased nearly 40% last week, underscoring the scope of impact and challenge ...
Happy First Birthday, NIST Privacy Framework!
Plain text. No HTML tags allowed. Web page addresses and email addresses turn into links automatically. Lines and paragraphs break automatically ...
Cybersecurity Concerns Require Attention From Sponsors, Participants and Recordkeepers
Firms concerned with protecting accounts and data are increasingly vigilant about the need to strengthen and safeguard their systems.
Milliman 401(k) Plan Sued for Use of ‘Untested’ Target Risk Funds
A 401(k) participant has filed a proposed class action lawsuit against her former employer, Seattle-based independent risk management, benefits and technology ...
ATI to De-Risk Nearly $1.8B in Pension Obligations
“With this action, ATI meets all of its pension obligations, and everyone benefits,” ATI CEO and Board Chair Robert Wetherbee said in a release.
CMMI Cyber Security Assessment for Munich Re HealthTech
Our last cybersecurity assessment, designed specifically for non-IT mandated entities within Munich Re Group, shows the current cybersecurity maturity of ...
13 Consulting Firms In San Diego To Know
Every business has difficult questions to answer and problems to solve. Luckily, these 13 San Diego consulting firms have all the answers you could ever ...
CIBC National Trust Company Confirms The CIBC Cyber Attack
The Canadian Imperial Bank of Commerce (CIBC) cyber attack through MOVEit vulnerability exploitation was posted about by security researchers.
2025 401(k) Contribution Limit Forecast: $1,000 Increase on Tap?
The limit is the greater of $10,000 or 150% of the regular catch-up limit, as indexed for inflation. For this projection, Milliman assumes the ...
Milliman Similar Companies
Acosta Group
Acosta Group fuses storied expertise, unmatched connectivity and advanced insight to accelerate brand growth – everywhere you sell. Our collective of the most trusted retail, marketing and foodservice agencies is reimagining how people connect with brands at every point in the consumer journey. Co
Publicis Sapient
Publicis Sapient is a digital business transformation company. We partner with global organizations to help them create and sustain competitive advantage in a world that is increasingly digital. We operate through our expert SPEED capabilities: Strategy and Consulting, Product, Experience, Engineeri
Accenture
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are
International Networkers Team
International Networkers Team es una organización con el propósito de desarrollar profesionales en la industria de las Redes de Mercadeo. Para lograrlo, utilizamos como metodología el Sistema Educativo y el trabajo en equipo. La base del Sistema es el convencimiento de que está al alcance de todos,
Applus+
Applus+ is a worldwide leader in the testing, inspection, and certification sector. We are a trusted partner, enhancing the quality and safety of our clients’ assets and infrastructures while safeguarding their operations and improving their environmental performance. Our innovative approach, techni
Corporativo Overall
Somos una organización con presencia internacional con más de 36 años de exitosa trayectoria. Contamos con operaciones en Perú, Colombia, Chile y Ecuador; así también brindamos servicios a Centro América y España. Brindamos soluciones integrales y a medida para el desarrollo del mercado labo
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Milliman CyberSecurity History Information
How many cyber incidents has Milliman faced?
Total Incidents: According to Rankiteo, Milliman has faced 2 incidents in the past.
What types of cybersecurity incidents have occurred at Milliman?
Incident Types: The types of cybersecurity incidents that have occurred incidents Ransomware and Data Leak.
How does Milliman detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through third party assistance with Kroll and enhanced monitoring with 24 months of complimentary identity monitoring services.
Incident Details
Can you provide details on each incident?
Incident : Ransomware
Title: MOVEit Transfer Platform Hack by Cl0p Ransomware Group
Description: The MOVEit Transfer file transfer platform, created by Progress Software Corporation, was the subject of a recent, major hacking effort by the Cl0p ransomware group, according to alarming information disclosed by cybersecurity firm Emsisoft.
Type: Ransomware
Threat Actor: Cl0p ransomware group
Incident : Data Breach
Title: Data Breach at Pension Benefit Information (PBI)
Description: A data breach at Pension Benefit Information (PBI) affected millions of individuals, including clients of TIAA, HHS, Milliman Solutions, CalPers, Genworth Financial, and Wilton Reassurance. The breach did not directly target TIAA's systems but affected PBI, a vendor of TIAA. PBI informed HHS and Milliman Solutions of the impact, and preventive measures were taken. Complimentary identity monitoring services were offered to affected individuals.
Type: Data Breach
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Data Leak.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach MIL24124723
Data Compromised: Pension Benefit Information, Personally Identifiable Information
Identity Theft Risk: High
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Pension Benefit Information and Personally Identifiable Information.
Which entities were affected by each incident?
Incident : Ransomware MIL45181223
Entity Type: Corporation
Industry: Software
Customers Affected: 60,144,069
Incident : Ransomware MIL45181223
Entity Type: Organization
Incident : Ransomware MIL45181223
Entity Type: Organization
Incident : Ransomware MIL45181223
Entity Type: Government
Industry: Public Administration
Location: Louisiana
Incident : Ransomware MIL45181223
Entity Type: Organization
Incident : Ransomware MIL45181223
Entity Type: Organization
Incident : Data Breach MIL24124723
Entity Type: Vendor
Industry: Financial Services
Customers Affected: 1,209,825
Incident : Data Breach MIL24124723
Entity Type: Client
Industry: Financial Services
Customers Affected: 1,280,823
Incident : Data Breach MIL24124723
Entity Type: Client
Industry: Financial Services
Customers Affected: 5,000,000
Incident : Data Breach MIL24124723
Entity Type: Client
Industry: Financial Services
Customers Affected: 5,000,000
Incident : Data Breach MIL24124723
Entity Type: Client
Industry: Financial Services
Customers Affected: 5,000,000
Response to the Incidents
What measures were taken in response to each incident?
Incident : Data Breach MIL24124723
Third Party Assistance: Kroll
Enhanced Monitoring: 24 months of complimentary identity monitoring services
How does the company involve third-party assistance in incident response?
Third-Party Assistance: The company involves third-party assistance in incident response through Kroll.
Data Breach Information
What type of data was compromised in each breach?
Incident : Ransomware MIL45181223
Number of Records Exposed: 60,144,069
Incident : Data Breach MIL24124723
Type of Data Compromised: Pension Benefit Information, Personally Identifiable Information
Number of Records Exposed: 1,209,825
Sensitivity of Data: High
Personally Identifiable Information: Yes
Ransomware Information
Was ransomware involved in any of the incidents?
Incident : Ransomware MIL45181223
Ransomware Strain: Cl0p
Regulatory Compliance
Were there any regulatory violations and fines imposed for each incident?
Incident : Data Breach MIL24124723
Regulatory Notifications: HHS, Maine Attorney General's Office
References
Where can I find more information about each incident?
Incident : Ransomware MIL45181223
Source: Emsisoft
Incident : Ransomware MIL45181223
Source: Cl0p group's leak site
Incident : Ransomware MIL45181223
Source: SEC filings
Incident : Data Breach MIL24124723
Source: Press Reports
Where can stakeholders find additional resources on cybersecurity best practices?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Emsisoft, and Source: Cl0p group's leak site, and Source: SEC filings, and Source: Press Reports.
Post-Incident Analysis
What is the company's process for conducting post-incident analysis?
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Kroll, 24 months of complimentary identity monitoring services.
Additional Questions
General Information
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Cl0p ransomware group.
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were Pension Benefit Information and Personally Identifiable Information.
Response to the Incidents
What third-party assistance was involved in the most recent incident?
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was Kroll.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Pension Benefit Information and Personally Identifiable Information.
What was the number of records exposed in the most significant breach?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 61.4M.
References
What is the most recent source of information about an incident?
Most Recent Source: The most recent source of information about an incident are Emsisoft, Cl0p group's leak site, SEC filings and Press Reports.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
