On June 26, 2023, Corebridge Financial, Inc. filed documents with the Securities and Exchange Commission disclosing a data breach discovering that a vulnerability in the MOVEit file transfer program used by the company resulted in an unauthorized party being able to access confidential consumer information. In this notice, Corebridge explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers and policy numbers. Upon completing its investigation, Corebridge began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Corebridge Financial, Inc., it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Corebridge Financial data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Corebridge Financial?

The Corebridge Financial data breach was only recently announced, and more information is expected in the near future. However, Corebridge’s filing with the Securities and Exchange Commission provides some important information on what led up to the breach. According to this source, on June 16, 2023, Corebridge was notified by one of its third-party vendors that MOVEit, a file transfer application used by the company, contained a critical vulnerability. This vulnerability allowed hackers to access data stored within Corebridge’s MOVEit server.

After learning about the MOVEit vulnerability, Corebridge began an investigation to determine what, if any, consumer data was impacted as a result of the incident.

Ultimately, Corebridge was able to determine that, as a result of the MOVEit vulnerability, the confidential information of certain consumers was accessible to an unauthorized party.

After learning that sensitive consumer data was accessible to an unauthorized party, Corebridge Financial reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number and policy number. Note that Corebridge’s information systems and operations were not impacted by the incident, as the unauthorized access was limited to information stored within the company’s MOVEit server.

On June 26, 2023, Corebridge Financial sent out data breach letters to anyone who was affected by the recent data security incident.

More Information About Corebridge Financial, Inc.

Corebridge Financial, Inc. is a financial services company based out of Houston, Texas. The company and its subsidiaries provide a range of life insurance, retirement solutions, and other financial services. Corebridge’s offerings include products and services designed to help businesses and individuals protect their assets, manage risks, and provide for retirement. Corebridge Financial employs more than 8,000 people and generates approximately $26 billion in annual revenue.