Jackson National Breach
Date: June, 2023Jackson National Life Insurance is a major insurance company in Lansing, Michigan. The organization employs close to 3,000 individuals and has an annual revenue of $14.4 billion, meaning they deal with a huge number of customers each year. With so many customers, it's alarming to learn the organization was hit by a data breach recently.
What Was the Breach?
There isn't an official accounting of the data taken from Jackson National Insurance in connection with this data breach yet, but it's likely that a substantial amount of personal customer data was lost. We suspect details such as SSNs, birth dates, phone numbers, addresses, emails, and much more were lost in the breach. Anyone that may have been impacted by the breach will have to wait for official statements and letters to come out to learn more.
How Did the Breach Occur?
Jackson National Insurance relies on a third-party provider known as PBI Research Services. The company handles IT Services for the organization and stores large amounts of data for Jackson customers. PBI relied on the MOVEit secure file transfer solution to move and manage its documents. This service was just hacked and exploited heavily by the C10P ransomware gang. The gang has been stealing Terabytes of data from dozens of organizations and then demanding ransom payments to keep from leaking the information online.
When Did This Breach Occur?
The company filed Form 8-K on June 26, 2023, but we suspect the breach occurred earlier, either at the end of May or the beginning of June.
Who Does the Breach Impact?
While we don't know specifically who the Jackson National Insurance breach impacts, it's likely that customers were mostly exposed by this breach. The company deals with a huge amount of customer information, making it the most likely target. Other than customers, it's possible that some employees were also exposed by this breach.
How Many Files Does the Breach Affect?
We suspect thousands of files were involved in the Jackson National Life breach. We don't have an actual count, but organizations that released information about the MOVEit file breach reported massive numbers of files taken.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...