Prudential Financial, a global financial services company, has revealed that over 2.5 million people had their personal information compromised in a February data breach.
According to an 8-K form filed with the U.S. Securities and Exchange Commission, Prudential detected the incident on February 5, one day after the attackers breached its systems and accessed administrative/user data and employee/contractor accounts.
In March, the Fortune 500 company revealed in a filing with the Maine Attorney General's Office that it notified over 36,000 people whose personal information was stolen during the breach.
Last week, the company updated the information shared with the Maine Attorney General's Office regarding the February data breach and now says that the incident impacted 2,556,210 people.
A Prudential Financial spokesperson has yet to reply to BleepingComputer's request for more details regarding the attack.
While Prudential has yet to share additional information regarding the threat actors behind the February 2024 data breach, the ALPHV/Blackcat ransomware gang claimed the attack on February 13.
ALPHV shut down its operations and pulled an exit scam after stealing the $22 million ransom from Notchy, the affiliate behind the Change Healthcare breach.
The FBI linked this ransomware gang to over 60 breaches worldwide during its first four months of activity and said that ALPHV raked in at least $300 million from over 1,000 victims until September 2023.
Prudential is the second-largest life insurance company in the United States, with 40,000 employees worldwide and reported revenues of over $50 billion in 2023.
In May 2023, the personal information of an additional 320,000 Prudential customers-including names, addresses, dates of birth, phone numbers, and Social Security numbers-was also exposed after the Clop cybercrime gang hacked into the MOVEit Transfer file-sharing platform of Pension Benefit Information, a third-party vendor handling the data.
Change Healthcare lists the medical data stolen in ransomware attack.
Panera Bread likely paid a ransom in March ransomware attack.
Keytronic confirms data breach after ransomware gang leaks stolen files.
Infosys McCamish says LockBit stole data of 6 million people.
BlackSuit ransomware gang claims attack on KADOKAWA corporation.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Mon, 01 Jul 2024 21:15:16 +0000