Retirement Solutions: outage update

Participant assets remain safe and invested.

Across TruStage, we continue to make progress restoring services through a deliberate, phased recovery approach. Because this incident affected a broad portion of the technology environment, systems and applications are being restored carefully to ensure they are secure, stable and validated before returning to service. Many critical capabilities have already been restored, and additional functionality continues to come online. While progress is being made every day, some capabilities will require additional time as recovery efforts continue.

We continue working with outside experts to investigate the cyber attack to understand the full impact, including whether any information was accessed. If customer information is found to have been accessed, TruStage will notify anyone affected directly with next steps.

As part of our phased recovery efforts, participants who previously established a BenefitsForYou online account can now access available retirement account information online. Participants will be required to reset their password before accessing account information.

Participant experiences may vary by retirement plan. Some participants will initially see account balances and additional account information, while others may see account balances displayed as of a specific market-value date while account information continues to be updated. Recent contributions, earnings adjustments, and other account activity may not yet be reflected online for all participants as restoration activities continue.

Participants who have not previously established a BenefitsForYou account will be invited to register in a future phase. Additional account information, online services, and transaction capabilities will continue to be restored over time.

For current information about balances, contributions, withdrawals, loans, investments, reporting, and available interim processes, visit the Retirement Solutions resource site.

We continue working with outside experts to investigate the cyber attack to understand the full impact, including whether any information was accessed. If customer information is found to have been accessed, TruStage will notify anyone affected directly with next steps.

As part of our phased recovery efforts, participants who previously established a BenefitsForYou online account can now access available retirement account information online. Participants will be required to reset their password before accessing account information.

Participant experiences may vary by retirement plan. Some participants will initially see account balances and additional account information, while others may see account balances displayed as of a specific market-value date while account information continues to be updated. Recent contributions, earnings adjustments, and other account activity may not yet be reflected online for all participants as restoration activities continue.

Participants who have not previously established a BenefitsForYou account will be invited to register in a future phase. Additional account information, online services, and transaction capabilities will continue to be restored over time.

For current information about balances, contributions, withdrawals, loans, investments, reporting, and available interim processes, visit the Retirement Solutions resource site.

Mandiant updated its Investigation Memo on October 9, 2026. Based on the forensic evidence reviewed to date, Mandiant states that TruStage's operating environment is clean, the incident is contained, and it has identified no indication of any active intrusion. Mandiant has not identified threat actor activity within the environments in scope since July 11, 2026. Systems and workstations are returned to service in the new environment only after being validated as clean and safe by Mandiant. Mandiant's investigation and TruStage's recovery efforts remain ongoing.