HackingFinancial ServicesFinanceVulnerability ExploitZero-DayData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHighContained

JACKSON NATIONAL LIFE INSURANCE COMPANY

bd_b3e70fedca02f146 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 1, 2023

Filed

Jul 24, 2023

To disclose

8 weeks

Affected

22,709state residents only

Linked

14 filings

Confidence

69%

Full breach record for JACKSON NATIONAL LIFE INSURANCE COMPANY →37 incidents on file

Jackson National Life Insurance Company filed a supplemental security incident notice with the Washington Attorney General regarding a MOVEit Transfer zero-day vulnerability exploited by an unknown third party. The incident involved third-party vendors Pension Benefit Information (PBI) and Swiss Re/NTT Data. Approximately 22,709 Washington residents were affected, with data including names, DOBs, and SSNs. Jackson took response actions including engaging Kroll for forensics and notifications, patching systems, and notifying the FBI. Notifications began July 24, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 8 weeks / 53 days

May 29, 2023

Begins

Jun 1, 2023

Discovered

Jul 24, 2023

Filed

vs. sector median

1 wks faster

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_d95ca6ae977c3c0a2023-06-29 · +25dVerified by operator

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_3fe0eaa9ffec360e2023-07-24Verified
California State AGbd_cbc64703c49a54d12023-07-25 · +1dVerified by operator
South Carolina State AGbd_23c03d25d6131fce2023-07-27 · +3dVerified by operator
Oregon State AGbd_26cceeee85a9892e2023-07-27 · +3dVerified by operator

Show 5 more filings ↓up to 28d gap

Massachusetts State AGbd_a30082bd75b3eca82023-07-19 · +5dVerified by operator
Massachusetts State AGbd_b1a06ec7b88564522023-08-15 · +22dVerified by operator
Oregon State AGbd_21d3af3146357a5a2023-08-17 · +24dVerified by operator
SEC 8-Kbd_266b6ea0ae51a5a02023-06-26 · +28dVerified by operator
Massachusetts State AGbd_49c73b8932d737ea2023-06-26 · +28dVerified by operator

Showing first 10 of 13 linked disclosures.

Name: JACKSON NATIONAL LIFE INSURANCE COMPANY
norm: jackson national life insurance
Domain: jackson.com

Name: JACKSON NATIONAL LIFE INSURANCE COMPANY
norm: jackson national life insurance
Domain: jackson.com
Industry: Financial Servicesllm

Discovered: Jun 1, 2023
Breach occurred: May 29, 2023 – May 30, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 24, 2023
Affected individuals: 22,709state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigations (FBI)Notified primary insurance regulatorsFiled 8-K with the Securities Exchange Commission (SEC)
Third party: via Pension Benefit Information, LLC
Initial access: exploit_public_facing

During the incident: Engaged Kroll to provide notification letter via regular mail
Engaged third-party cybersecurity specialists
Secured Jackson’s servers
Patched the identified MOVEit vulnerability
Conducted a forensic analysis
Notified the Federal Bureau of Investigations (FBI)
Notified primary insurance regulators
Filed 8-K with the Securities Exchange Commission (SEC)
Changes made: Rectified the MOVEit vulnerability
Obtained assurance report from Kroll Inc.
Provided 12 months of credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 6 states

View merged incident ↗

SEC 8-KJun 26 · first

Massachusetts State AGJun 26 · first

Massachusetts State AG+23d

Indiana State AG+28d

Washington State AG+28d · this page

California State AG+29d

South Carolina State AG+31d

Oregon State AG+31d

Massachusetts State AG+50d

Oregon State AG+52d

Pattern: first filing Jun 26, last Aug 17 (OR) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA25960.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 24, 2023
Raw hash: 93dba98b65354be1e8d7052f56a653a545e83b5ba11c58e8ac46c4806d60d1cd

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityJACKSON NATIONAL LIFE INSURANCE COMPANY

Victim entityJACKSON NATIONAL LIFE INSURANCE COMPANY

Incidentdiscovered Jun 1, 2023

Stated responseEngaged Kroll to provide notification letter via regular mail

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com