JACKSON NATIONAL LIFE INSURANCE COMPANY
bd_266b6ea0ae51a5a0 · schema v1 · pii pii-v1
Full breach record for JACKSON NATIONAL LIFE INSURANCE COMPANY →Jackson National Life Insurance Company (subsidiary of Jackson Financial Inc.) disclosed a cybersecurity incident resulting from the MOVEit Transfer zero-day vulnerability exploited by an unknown actor at third-party vendor Pension Benefit Information, LLC (PBI). The incident impacted approximately 700,000 to 800,000 customers. Additionally, unauthorized access occurred on two of Jackson's own servers, though the scope was significantly less. Jackson engaged forensic specialists, secured servers, patched the vulnerability, and notified law enforcement and regulators. Credit monitoring services will be offered to affected individuals.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_b3e70fedca02f146Washington State AGfiled 2023-07-24(28d gap)Verified
- bd_cbc64703c49a54d1California State AGfiled 2023-07-25(29d gap)Verified
- bd_26cceeee85a9892eOregon State AGfiled 2023-07-27(31d gap)Verified
- bd_21d3af3146357a5aOregon State AGfiled 2023-08-17(52d gap)Verified
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1822993/000110465923074776/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jun 26, 2023
- Raw hash
- a767303f43e467929f546cc4d53f42a6f9be0827f1f58f1fcf5a6f60cfc51cac
Source filing
Reporting entity
- Name
- Jackson Financial Inc.norm: jackson financial
- SEC CIK
- 0001822993
Victim entity
- Name
- JACKSON NATIONAL LIFE INSURANCE COMPANYnorm: jackson national life insurance
Incident
- Discovered
- Jun 20, 2023
- Materiality determined
- Jun 26, 2023
- Notification sent
- —
- Affected individuals
- 800,000
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcementNotified primary insurance regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Jun 26, 2023→ Filed: Jun 26, 20230d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.