FEDERALItem 8.01 · voluntaryHackingFinancial ServicesFinanceLowContained

REINSURANCE GROUP OF AMERICA, INCORPORATED

bd_5cf4ae65a69d329e · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 16, 2023

Filed

Oct 26, 2023

To disclose

10 days

Affected

Not disclosed

Confidence

88%

Full breach record for REINSURANCE GROUP OF AMERICA, INCORPORATED →

Reinsurance Group of America, Incorporated disclosed in an Item 8.01 Form 8-K that on October 16, 2023 it identified a cybersecurity incident in which an unauthorized third party accessed certain technology systems, believed to have begun October 15, 2023. RGA took systems offline, engaged forensic experts, and notified insurance regulators and law enforcement. Investigation to date found no evidence client policy holder data was accessed or extracted and no evidence of encryption or ransomware. RGA does not believe the incident will be materially adverse.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 10 days

Oct 15, 2023

Begins

Oct 16, 2023

Discovered

Oct 26, 2023

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: REINSURANCE GROUP OF AMERICA, INCORPORATED
norm: reinsurance group of america
SEC CIK: 0000898174

Name: REINSURANCE GROUP OF AMERICA, INCORPORATED
norm: reinsurance group of america
SEC CIK: 0000898174
Industry: Financial Servicesllm

Discovered: Oct 16, 2023
Breach occurred: Oct 15, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified certain insurance regulatory authoritiesNotified law enforcement authorities

During the incident: Initiated response protocols
Deploying a number of containment measures such as taking certain systems offline as a precautionary measure
Launched an investigation, which remains ongoing
Engaged the services of cybersecurity and forensics experts and advisors
Notified certain insurance regulatory authorities and law enforcement authorities
Working to bring its systems back online and resume normal operations
In communication with clients about the incident and its restoration progress
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/898174/000119312523264063/d575440d8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Oct 26, 2023
Raw hash: dd90470f98327ba61f66b1a280074318bf0168bf2b94ea56b34993c20ea930a2

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html30.1 KB

Download View at source

Reporting entityREINSURANCE GROUP OF AMERICA, INCORPORATED

Victim entityREINSURANCE GROUP OF AMERICA, INCORPORATED

Incidentdiscovered Oct 16, 2023

Stated responseInitiated response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing