TruStage is actively investigating a cybersecurity attack

TruStage believes it is important to reiterate that annuity balances and benefits have not been impacted by this cybersecurity attack.

While this incident has affected certain of our normal servicing and transaction processing systems, your contract values, account balances, and benefits have not been impacted by this incident. As we recover, we will be servicing and processing contract owner transactions based on the date and time we received the transaction request as we would under normal circumstances. We are working diligently to restore customers' ability to view their account information.

Based on our investigation to date, there is no evidence that contract owner funds, the assets supporting our annuity obligations, or any other company financial accounts have been subject to any unauthorized transactions as part of this incident.

We are working diligently to restore customers’ ability to view their annuity account information and contract details online. At this time, our Contact Center can answer certain inquiries, such as contract value, status of withdrawals and surrenders, and the status of requests involving funds moving to another carrier. Other access may be limited while system and network functionality is restored through a controlled recovery process.

All outstanding monthly annuity systematic withdrawals have been processed. Going forward, monthly systematic withdrawals will be processed on their scheduled payment dates. For ZoneChoice Advantage, ZoneChoice Income, ZoneChoice contracts issued on or after June 10, 2023, and most SPIA and annuitized contracts, existing quarterly, semi-annual, and annual systematic withdrawals are also being processed on the scheduled payment date. Most others were not identified through our interim processing to date; we continue working diligently to identify these. Please call our Contact Center for assistance if an expected payment was missed.

Contract owners who have not received an expected systematic withdrawal should contact their financial professional or our Contact Center for assistance. TruStage continues to work through recovery efforts and investigate outstanding payment situations.

As is common following highly visible events, fraudsters may attempt to exploit uncertainty by posing as trusted organizations. Do not provide passwords, banking credentials, payment information or other sensitive personal information in response to unsolicited communications. If you are unsure whether a communication is legitimate, contact your financial professional or appropriate TruStage support contact before taking action.

At this stage, it would be premature to draw conclusions about the scope or impact of the incident, including whether any data may have been accessed. We do not want to speculate or get ahead of the facts and will provide additional information as we can. We are conducting a comprehensive forensic and data-impact analysis with the assistance of external cybersecurity experts. Because of the complexity of this process, it may take time to complete the analysis and determine what, if any, information may have been impacted. If we determine that notifications are required, we will communicate through the appropriate channels.

We understand that situations like this can raise questions and concerns. As our understanding of the situation evolves, we will communicate appropriately.

Yes. We continue to work closely with Mandiant, a leading cybersecurity firm, as part of its ongoing investigation and recovery efforts. Please review Mandiant’s most recent Investigation Memo.