TruStage is actively investigating a cybersecurity attack

TruStage believes it is important to reiterate that annuity balances and benefits have not been impacted by this cybersecurity attack.

While this incident has affected certain of our normal servicing and transaction processing systems, your contract values, account balances, and benefits have not been impacted by this incident. As we recover, we will be servicing and processing contract owner transactions based on the date and time we received the transaction request as we would under normal circumstances. We are working diligently to restore customers' ability to view their account information.

Based on our investigation to date, there is no evidence that contract owner funds, the assets supporting our annuity obligations, or any other company financial accounts have been subject to any unauthorized transactions as part of this incident.

We are working diligently to restore customers’ ability to view their annuity account information and contract details online. At this time, our Contact Center can answer certain inquiries, such as contract value, status of withdrawals and surrenders, and the status of requests involving funds moving to another carrier. Other access may be limited while system and network functionality is restored through a controlled recovery process.

All outstanding monthly annuity systematic withdrawals have been processed. Going forward, monthly systematic withdrawals will be processed on their scheduled payment dates. For ZoneChoice Advantage, ZoneChoice Income, ZoneChoice contracts issued on or after June 10, 2023, and most SPIA and annuitized contracts, existing quarterly, semi-annual, and annual systematic withdrawals are also being processed on the scheduled payment date. Most others were not identified through our interim processing to date; we continue working diligently to identify these. Please call our Contact Center for assistance if an expected payment was missed.

Contract owners who have not received an expected systematic withdrawal should contact their financial professional or our Contact Center for assistance. TruStage continues to work through recovery efforts and investigate outstanding payment situations.

As is common following highly visible events, fraudsters may attempt to exploit uncertainty by posing as trusted organizations. Do not provide passwords, banking credentials, payment information or other sensitive personal information in response to unsolicited communications. If you are unsure whether a communication is legitimate, contact your financial professional or appropriate TruStage support contact before taking action.

TruStage continues to conduct a comprehensive forensic and data-impact analysis with the assistance of external cybersecurity experts. Determining whether any information was accessed and understanding the scope of any potential impact requires extensive investigation and validation. Because of the complexity of this process, the analysis is expected to take additional time. If TruStage determines that notifications are required, those communications will be made through the appropriate channels.

We understand that situations like this can raise questions and concerns. As our understanding of the situation evolves, we will communicate appropriately.

Mandiant has not identified any threat actor activity within the environments in the scope of its investigation since July 11, 2026, which is when TruStage first became aware of the incident and took measures to contain and remediate the issue. Please review Mandiant's most recent Investigation Memo dated August 27.