HackingFinancial ServicesFinanceStolen CredentialsAbuse Of FunctionalityCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

PRUCO LIFE INSURANCE COMPANY OF NEW JERSEY

bd_d4ede04488c6fff8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 10, 2024

Filed

May 19, 2026

To disclose

—

Affected

2state residents only

Linked

2 filings

Confidence

92%

Full breach record for PRUCO LIFE INSURANCE COMPANY OF NEW JERSEY →

Between June and November 2024, an unauthorized individual fraudulently accessed a Prudential website used by third-party Broker-Dealer financial professionals, using information from a non-Prudential source to impersonate financial professionals. On December 10, 2024, investigation confirmed that names, partial SSNs, email addresses, dates of birth, annuity details, and account numbers of affected individuals could have been viewed. Two Maryland residents were impacted and notified on January 3, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 192 days

Jun 1, 2024

Begins

Dec 10, 2024

Discovered

May 19, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_b9ed1599c8d810302025-01-03 · +502dCandidate

Name: PRUCO LIFE INSURANCE COMPANY OF NEW JERSEY
norm: pruco life insurance company of new jersey
Domain: prudential.com

Name: PRUCO LIFE INSURANCE COMPANY OF NEW JERSEY
norm: pruco life insurance company of new jersey
Domain: prudential.com
Industry: Financial Services and Insurance
Industry: Financial Servicesllm

Discovered: Dec 10, 2024
Breach occurred: Jun 1, 2024 – Nov 30, 2024
Undetected for: 192 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 3, 2025
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1566 Phishing
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Attorney General's Office of the data security incident
Initial access: valid_credentials

During the incident: Revoked the unauthorized individual's access to the website
Performed a manual lookback on all known fraudulent IP addresses associated with these events
Deactivated any fraudulent financial professional accounts
Blocked individuals using fraudulent and suspicious IP addresses from logging into Prudential website accounts
Increasing fraud reporting and logging
Implemented additional policy restrictions and fraud alerts for impacted customers
Deployed restrictions that will cause any fraudulent customer account attempts to fail
Offered twenty-four (24) months of credit monitoring and identity theft restoration services through Kroll at no cost to the individual
Changes made: Increasing reporting metrics
Implementing additional policy restrictions and fraud alerts for impacted customers
Working to employ additional security controls in response to this incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJan 3 · first

Maryland State AG+502d · this page

Pattern: first filing Jan 3 (NH), last May 19 (MD) — a 502-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 19, 2026
Raw hash: b9f3f4517461462f545b33ac756a8b0396d361407e389701e64f48f51060090e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPRUCO LIFE INSURANCE COMPANY OF NEW JERSEY

Victim entityPRUCO LIFE INSURANCE COMPANY OF NEW JERSEY

Incidentdiscovered Dec 10, 2024

Stated responseRevoked the unauthorized individual's access to the website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov