Jackson National Life Insurance Company data breach (2023)

FEDERALSEC 8-KFirst filing

Filed Jun 26, 2023bd_266b6ea0ae51a5a0

Jackson National Life Insurance Company (subsidiary of Jackson Financial Inc.) disclosed a cybersecurity incident resulting from the MOVEit Transfer zero-day vulnerability exploited by an unknown actor at third-party vendor Pension Benefit Information, LLC (PBI). The incident impacted approximately 700,000 to 800,000 customers. Additionally, unauthorized access occurred on two of Jackson's own servers, though the scope was significantly less. Jackson engaged forensic specialists, secured servers, patched the vulnerability, and notified law enforcement and regulators. Credit monitoring services will be offered to affected individuals.

Affected (this filing): 800,000

🌲Washington State AGlinked via same-victim cross-source · 95%

🐻California State AGlinked via same-victim cross-source · 95%

Filed Jul 25, 2023bd_cbc64703c49a54d1

Jackson National Life Insurance Company notified the California Attorney General of a data breach affecting policyholder information. The incident resulted from an unauthorized third party exploiting a vulnerability in MOVEit Transfer software used by their vendor, Pension Benefit Information, LLC (PBI). The breach occurred between May 29 and May 30, 2023, when data was downloaded from PBI's servers. Affected data included names, Social Security numbers, and dates of birth. Jackson offered 12 months of credit monitoring and identity restoration services to affected individuals.

🦫Oregon State AGlinked via same-victim cross-source · 95%

Filed Jul 27, 2023bd_26cceeee85a9892e

Jackson National Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-07-27. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/20/2023. 845,644 individuals were affected. Notice was sent on 7/24/2023.

Affected (this filing): 845,644

OR AG ≤45d

🦫Oregon State AGlinked via same-victim cross-source · 95%

Filed Aug 17, 2023bd_21d3af3146357a5a

Jackson National Life Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-17. The breach occurred during 5/29/2023 - 5/30/2023. The breach was discovered on 6/20/2023. 7,000 individuals were affected. Notice was sent on 8/16/2023.

Affected (this filing): 7,000

OR AG >45d

JACKSON NATIONAL LIFE INSURANCE COMPANY

Litigation Timing

Affected residents by state

Timeline