Data leak
Prudential Financial data breach (ALPHV/BlackCat)
Primary Source βIncident Details
ALPHV/BlackCat claimed responsibility for the breach, detected 5 February 2024 (breach date 4 February). Initial SEC disclosure in February cited ~36,000 potential victims; updated notification to Maine AGO in July 2024 revised the figure to 2,556,210 individuals. Stolen data included names, addresses, driver’s licence numbers, and non-driver ID card numbers. Prudential offered 24 months of Kroll credit monitoring. This breach occurred roughly two weeks before the more impactful Change Healthcare attack by the same ALPHV group.
Technical Details
- Initial Attack Vector
- unknown
- Vendor / Product
- Prudential Financial
- Malware Family
- ALPHV/BlackCat ransomware
Timeline
- 2024-02-04 Breach occurred
- 2024-02-13 Publicly disclosed
- 2024-07-01 Customers notified