CalPERS, CalSTRS Hit By Third-Party Cybersecurity Breach

The public employee retirement systems are working to notify people with exposed accounts. 

The California Public Employees’ Retirement System, which serves state employees in California and is the largest pension fund in the U.S., and the California State Teachers Retirement System, the public pension fund serving California teachers, were among the public and private sector institutions affected by a major data breach.

In a statement last week, CalSTRS said, “On June 4, 2023, a CalSTRS vendor, PBI Research Services, advised us that its systems were involved in the recent mass exploit of a vulnerability in the MOVEit secure file transfer system. This incident did not involve unauthorized access to CalSTRS’ network. CalSTRS is working with PBI to identify the CalSTRS members whose information was involved in PBI’s incident. CalSTRS will provide notice to any members and beneficiaries whose personal information was involved in accordance with applicable law.”

For more stories like this, sign up for the PLANADVISERdash daily newsletter.

According to published reports, other affected organizations include Genworth Financial, a Virginia-based life insurance services provider, and Wilton Re, a New York-based insurance provider. In all, the security breach at PBI Research Services, which recently merged with The Berwyn Group, impacted the personal information of approximately 769,000 members, according to CalPERS’ Tuesday communication to its retired members and their families.

PBI provides services to CalPERS to identify member deaths, and these services ensure that proper payments are made to retirees and beneficiaries and prevent instances of overpayments or other errors. The security incident did not impact information systems operated by CalPERS, according to the press release.

Retirees and beneficiaries with impacted personal information are being contacted by mail with information on how to take additional steps to protect their information, and CalPERS offered free credit monitoring for two years.

In addition, PBI notified CalPERS that retired member files were impacted as well. Some of those include inactive members who may soon become eligible for benefits.

PBI has reported the incident to federal law enforcement and has told CalPERS it has “resolved the vulnerability,” while also adding additional security measures. According to a press release, CalPERS has added new protocols on its member benefits website, myCalPERS, as well as additional safeguards for those who use the member contact center and those who visit any CalPERS regional office.

Median Retirement Plan Value Hits Record Low in 2022

Market volatility also contributed to declines in average plan balances, contribution rates and overall plan participation, according to Alight.  


The median defined contribution plan value among more than 3 million participants in 2022 was $23,818, the lowest value in more than a decade, according to Alight’s recently released
2023 Universe Benchmarks report. 

The lower median value was due in part to new participants coming in with shorter service times and small balances last year, but plans across all timelines and sizes were hit by market declines, according to the report, with median returns for investors declining 14.7%. The tough year for savers led to overall drops in plan balances, contribution rates and other key measures that trended “in the wrong direction,” Alight wrote. 

For more stories like this, sign up for the PLANADVISERdash daily newsletter.

The average plan balance overall fell from $114,280 at the start of the year to $111,210 by year end, Alight found. Meanwhile, average plan participation slipped slightly to 83% from 84%, and the average contribution rate from participants dipped to 8.3% from 8.6% in 2021.  

The retirement benefits provider still struck a positive, ‘silver lining’ message in the report despite the market hit to savers. Alight found that participants held the course overall, as loan usage remained historically low and only 19% of participants had an outstanding loan. As recently as a decade ago, the percentage was closer to 30%, according to Alight. 

“On the surface, it might seem like 2022 was a lost year for workers in defined contribution plans,” Rob Austin, head of research at Alight Solutions, said in a statement. “Every day, Wall Street seemed to be punching plan balances down. Additionally, practically all other key measures of success—plan participation, average savings rates, loans and withdrawals—were trending in the wrong direction.”  

But when digging deeper into the data and findings from the report, 2022 was not as bad as it may have seemed, according to the researcher.  

“Trading activity was basically the same as other years. Most people did not make drastic, knee-jerk reactions to their investments,” Austin said. “Only 3% of people stopped contributing, and the number of people who increased contribution rates was more than twice the number who decreased their savings. In fact, much of the movement in the data can be attributed to an influx of newly eligible participants. Because of the Great Reshuffling, the percentage of DC-eligible workers with fewer than two years of service increased by 30% in 2022.” 

In 401(k) plan participant research released by Fidelity Investment’s earlier this year, that positive message was reinforced by an upward trend in the final quarter of the year.  When considering Fidelity’s full sample of 43 million savers, account balances were up in the fourth quarter of 2022, and participants continued to defer into retirement plans despite higher costs due to inflation and market uncertainty.  

It will be interesting to see if workers return to saving at higher rates,” Alight concluded in its report Lincolnshire, Illinoi-based firm’s report featured data from nearly 100 plans covering 3 million eligible participants.  

«