COREBRIDGE FINANCIAL, INC.
ent_019de5f6054912168c9e07a41d86dea5
Disclosures
7
State AG · SEC 8-K · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
6,500,000
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- COREBRIDGE FINANCIAL, INC.
- Normalized
- corebridge financial— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300XY1661QCIA7J65
- SEC EDGAR CIK
- 0001889539
- Domain
- corebridgefinancial.com
Disclosure history (7)newest first
- Indiana State AGas victim2024-02-13
Corebridge Financial, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-27 and was reported on 2024-02-13. 2 Indiana residents were affected.
- California State AGas victim2023-07-27
Corebridge Financial, Inc. reported a data breach affecting its customers via third-party vendor Pension Benefit Information, LLC (PBI). An unauthorized third party exploited a vulnerability in Progress Software's MOVEit Transfer to access PBI servers on May 29-30, 2023, and exfiltrated data. Affected data includes names, Social Security numbers, policy/account numbers, dates of birth, and addresses. Corebridge's own systems were not impacted. PBI notified law enforcement, patched servers, and offered 24 months of credit monitoring.
- Oregon State AGas victim2023-07-27
Corebridge Financial, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-27. The breach occurred during 1/1/0001.
- Indiana State AGas victim2023-07-27
Corebridge Financial, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-07-27. 188,421 Indiana residents were affected. 6,500,000 individuals affected in total.
- Montana State AGas reporting2023-07-27
Pension Benefit Information, LLC (PBI) disclosed a data breach involving the MOVEit Transfer software vulnerability (CVE-2023-34362). An unauthorized third party accessed PBI servers on May 29-30, 2023, downloading personal information including names, SSNs, and dates of birth. The breach impacted PBI's clients, including Corebridge Financial, Inc. PBI notified law enforcement, patched systems, and offered 24 months of credit monitoring. Corebridge confirmed its systems were not directly impacted.
- Massachusetts State AGas victim2023-07-27
Corebridge Financial, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-27. 90,697 Massachusetts residents were affected. The report records the breach type as electronic.
- FEDERALSEC 8-Kas victim2023-06-26
Corebridge Financial, Inc. disclosed that a third-party vendor experienced a security incident targeting a zero-day vulnerability in the MOVEit Transfer Application. As a result, an unauthorized party obtained personal information about a significant number of Corebridge customers, including in some instances social security numbers and policy numbers. The investigation is ongoing, and the company is offering credit monitoring services. The company does not currently believe the incident will have a material adverse effect on its business.
Supply-chain cascadesreviewed and confirmed
- COREBRIDGE FINANCIAL, INC.’s filing is one of at least 31 in the Pension Benefit Information, LLC supply-chain incident (2023).
Subsidiary disclosures (newest 10)filed by group companies
◈ These filings were made by or about subsidiaries of COREBRIDGE FINANCIAL, INC. — not by COREBRIDGE FINANCIAL, INC. itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.
- Indiana State AGvia The Variable Annuity Life Insurance2025-10-30
The Variable Annuity Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2025-05-04 and was reported on 2025-10-30. 1 Indiana residents were affected.
- Massachusetts State AGvia The Variable Annuity Life Insurance2024-03-18
The Variable Annuity Life Insurance reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-18. 1 Massachusetts residents were affected.
- Indiana State AGvia The Variable Annuity Life Insurance2024-03-08
The Variable Annuity Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2023-09-24 and was reported on 2024-03-08. 1 Indiana residents were affected. 62 individuals affected in total.
- Indiana State AGvia The Variable Annuity Life Insurance2024-03-08
The Variable Annuity Life Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-20 and was reported on 2024-03-08. 1 Indiana residents were affected.
- New Hampshire State AGvia VALIC Retirement Services Company2023-07-31
VALIC Retirement Services Company, a subsidiary of Corebridge Financial, notified the NH Attorney General of a third-party breach involving its service provider, Pension Benefit Information, LLC (PBI). PBI was affected by the MOVEit zero-day vulnerability, allowing an unauthorized third party to access and download data from May 29-30, 2023. Approximately 1,790 New Hampshire residents were affected. Corebridge suspended data transmissions to PBI upon learning of the incident on June 5, 2023. PBI offered credit monitoring and identity restoration services.
- Maine State AGvia VALIC Retirement Services Company2023-07-31
VALIC Retirement Services Company (VRSCO) reported a data breach affecting 2,722 Maine residents. The breach was attributed to an incident at a third-party service provider that occurred between May 29, 2023, and May 30, 2023. The company discovered the breach on June 26, 2023. The compromised information includes names and Social Security numbers. VRSCO began notifying affected individuals on July 27, 2023, and offered 24 months of complimentary credit monitoring, fraud consultation, and identity restoration services through Kroll.
- Massachusetts State AGvia AMERICAN GENERAL LIFE INSURANCE COMPANY2019-07-02
American General Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-02. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGvia AMERICAN GENERAL LIFE INSURANCE COMPANY2019-05-22
American General Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-22. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGvia AMERICAN GENERAL LIFE INSURANCE COMPANY2019-05-17
American General Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-17. 2 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGvia AMERICAN GENERAL LIFE INSURANCE COMPANY2019-05-09
American General Life Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-09. 7 Massachusetts residents were affected. The report records the breach type as paper.