Prudential Financial reports a cybercrime group accessed administrative and user data

Prudential Financial disclosed on February 13, 2024 that a threat actor it suspected to be a cybercrime group had been in some of its systems since February 4, 2024. The insurer detected the access on February 5, eight days before the filing.

First filing

At that point Prudential said the actor had reached company administrative and user data and a small percentage of employee and contractor accounts, and that it had no evidence customer or client data had been taken.

Amendment, February 21, 2024

Eight days later the company revised that. The 8-K/A said the group had taken limited data from a platform, including some client information and personally identifiable information. Prudential added that it had found no malware, ransomware, or data destruction.

Unknowns

Neither filing identifies the platform involved or the number of clients affected, and neither names the group.