On July 23, 2024, Pinnacle Claims Management, Inc. suffered a data breach stemming from a security vulnerability in Progress Software’s MOVEit file transfer application, as reported by the California Office of the Attorney General on November 19, 2024. The incident exposed personal information, including names and potentially other sensitive details, though the exact number of affected individuals remains undisclosed. The breach highlights risks associated with third-party software vulnerabilities, which cybercriminals frequently exploit to infiltrate systems and exfiltrate data. While the full scope of the compromised data is unclear, the exposure of personal identifiers raises concerns about potential identity theft, fraud, or misuse of the leaked information. The incident underscores the critical need for robust patch management and proactive monitoring of third-party tools to mitigate such risks. No evidence suggests ransomware or direct financial harm, but the unauthorized access to personal data poses reputational and compliance risks for the company.

The California Office of the Attorney General reported a data breach involving Pinnacle Claims Management, Inc. (PCMI) on October 25, 2022. The breach occurred on June 26, 2022, and may have involved certain personal information, although specific details of the data compromised are unclear.