FEDERALItem 1.05 · mandatoryHackingFinancial ServicesFinanceLife InsuranceEmployee Data InvolvedEmploymentLowActive

PRUDENTIAL FINANCIAL, INC.

bd_7f25c20411f175d9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 5, 2024

Filed

Feb 13, 2024

To disclose

8 days

Affected

Not disclosed

Linked

6 filings

Confidence

81%

Full breach record for PRUDENTIAL FINANCIAL, INC. →21 incidents on file

On February 5, 2024, Prudential Financial detected unauthorized access (beginning February 4, 2024) by a suspected cybercrime group to certain IT systems, exposing administrative and user data and a small percentage of employee/contractor accounts. No evidence of customer or client data theft as of the filing. The Company engaged external cybersecurity experts, notified law enforcement and regulators, and states the incident has not had a material impact on operations or financial condition.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Feb 12, 2024 → Filed Feb 13, 20241d ✓ SEC 4-day OK8 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 8 days

Feb 4, 2024

Begins

Feb 5, 2024

Discovered

Feb 12, 2024

Scope determined

Feb 13, 2024

Filed

vs. sector median

7 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_13768b7afb7253cc2024-02-16 · +4dVerified by operator

Regulatory filings (4) · sorted by filing gap

SEC 8-Kbd_543ce67bdd8ba3e82024-02-21 · +8dVerified
Hawaii State AGbd_ae0d1296d328e7102024-03-01 · +17dVerified
Indiana State AGbd_9c8870851e5c43f02025-01-03 · +325dVerified by operator
Massachusetts State AGbd_ca1bd22c056a48ec2025-01-03 · +325dVerified by operator

Name: PRUDENTIAL FINANCIAL, INC.
norm: prudential financial
SEC CIK: 0001137774
Domain: prudential.com
Industry: Insurance / Financial Services

Name: PRUDENTIAL FINANCIAL, INC.
norm: prudential financial
SEC CIK: 0001137774
Domain: prudential.com
Industry: Insurance / Financial Services
Industry: Financial Servicesllm
NAICS 524113 · Direct Life Insurance Carriers

Discovered: Feb 5, 2024
Breach occurred: Feb 4, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: Feb 12, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: Employment
Attack vector: Unauthorized Access
Threat actor: ExternalFinancial
Regulator citations: Reported the matter to relevant law enforcementInforming regulatory authorities

During the incident: Activated our cybersecurity incident response process to investigate, contain, and remediate the incident
Engaged external cybersecurity experts
Reported this matter to relevant law enforcement
Informing regulatory authorities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: SEC 4-day OK · 1d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Feb 12, 2024
→ Filed: Feb 13, 2024
1d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Feb 12, 2024 → Filed: Feb 13, 2024	1d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 3 states

View merged incident ↗

SEC 8-KFeb 13 · first · this page

SEC 8-K+8d

Hawaii State AG+17d

Indiana State AG+325d

Massachusetts State AG+325d

Pattern: first filing Feb 13, last Jan 3 (MA) — a 325-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1137774/000119312524033753/d770643d8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 13, 2024
Raw hash: 0577bc3568975a01d4a10909910c62826deee31dd660bfe69a334987f4bc12d4

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html28.9 KB

Download View at source

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityPRUDENTIAL FINANCIAL, INC.

Victim entityPRUDENTIAL FINANCIAL, INC.

Incidentdiscovered Feb 5, 2024

Stated responseActivated our cybersecurity incident response process to investigate, contain, and remediate the incident

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing