Enstar Inc., a reputable insurance and business management firm headquartered in Bermuda, disclosed a significant data breach following the discovery of a critical vulnerability in MOVEit, a file-transfer program employed by Enstar. The breach led to unauthorized access to sensitive consumer information, including names, Social Security numbers, and driver’s license numbers.
The incident, revealed through Enstar’s filing with the Attorney General of Maine on November 20, 2023, prompted immediate action, with Enstar initiating an extensive investigation upon learning of the vulnerability in MOVEit, a software utilized for managing insurance claims data.
Progress Software’s announcement of a zero-day vulnerability in MOVEit on May 31, 2023, spurred Enstar to promptly implement all available software updates and recommended mitigations to bolster security measures. Collaborating with external cybersecurity experts, Enstar undertook rigorous investigations to assess the extent of the breach.
Investigation outcomes confirmed unauthorized access by hackers to Enstar’s MOVEit server between May 29, 2023, and May 31, 2023, resulting in the extraction of data containing confidential consumer information. Enstar, upon identifying compromised files, concluded its assessment on October 21, 2023, determining the potential exposure of personal details, varying by individual, encompassing names, Social Security numbers, and driver’s license numbers.
In response to the breach’s severity, Enstar took proactive measures, initiating data breach notification letters on November 20, 2023, to inform affected individuals about the compromised information specific to them.
Enstar Inc., established in 2001, operates as an insurance and business management entity, publicly traded on the NASDAQ under “ESGR.” With a workforce exceeding 792 individuals, Enstar generates an annual revenue of approximately $230 million, underscoring its substantial presence within the insurance sector.
