JACKSON NATIONAL LIFE INSURANCE COMPANY
bd_cbc64703c49a54d1 · schema v1 · pii pii-v1
Full breach record for JACKSON NATIONAL LIFE INSURANCE COMPANY →Jackson National Life Insurance Company notified the California Attorney General of a data breach affecting policyholder information. The incident resulted from an unauthorized third party exploiting a vulnerability in MOVEit Transfer software used by their vendor, Pension Benefit Information, LLC (PBI). The breach occurred between May 29 and May 30, 2023, when data was downloaded from PBI's servers. Affected data included names, Social Security numbers, and dates of birth. Jackson offered 12 months of credit monitoring and identity restoration services to affected individuals.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_b3e70fedca02f146Washington State AGfiled 2023-07-24(1d gap)Verified
- bd_26cceeee85a9892eOregon State AGfiled 2023-07-27(2d gap)Verified
- bd_21d3af3146357a5aOregon State AGfiled 2023-08-17(23d gap)Verified
- bd_266b6ea0ae51a5a0SEC 8-Kfiled 2023-06-26(29d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-570812
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2023
- Raw hash
- 16071bd8da3b6aea9595d840ff01a1deceea809663d9b17868ee9002419a12c3
Reporting entity
- Name
- JACKSON NATIONAL LIFE INSURANCE COMPANYnorm: jackson national life insurance
Victim entity
- Name
- JACKSON NATIONAL LIFE INSURANCE COMPANYnorm: jackson national life insurance
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified relevant state regulatorsNotified federal law enforcement authorities
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.