Skip to content
Breach Index · running record

Prudential Financial (PGIM’s parent) data breaches: the 2024 intrusion, the 2023 MOVEit vendor hack, and what was confirmed

PGIM is the investment management arm of Prudential Financial. In the last ten years, Prudential disclosed one intrusion into its own systems (February 2024) and one breach at a vendor (MOVEit, 2023). Neither filing names PGIM. This page sets out what Prudential told the SEC and state regulators, how the numbers changed, and what customers should do.

Short answer

Was Prudential hacked?

Yes. In a Form 8-K filed with the SEC in February 2024, Prudential Financial said a threat actor, which it suspected was a cybercrime group, got into some of its systems from 4 February 2024 and was detected on 5 February. Its first filing with Maine’s Attorney General listed 36,545 affected people; an update filed in late June 2024 raised that to 2,556,210, according to SecurityWeek. The data listed was names, addresses, and driver’s licence or non-driver ID card numbers.

Separately, in 2023 Prudential customers were exposed through a vendor. Pension Benefit Information (PBI), which Prudential used, was hacked through the MOVEit Transfer flaw. Prudential Insurance Company of America’s revised Maine filing listed at least 320,840 people, per Teiss. PBI said Prudential’s own systems were not affected.

We found no incident naming PGIM itself, and no cybersecurity fine against Prudential, in the sources we read. A class action over the 2024 intrusion settled for $4.75 million without any admission of wrongdoing.

Timeline at a glance

  1. 29-30 May 2023MOVEit server at vendor PBI accessed; Prudential customer data downloaded. (Teiss / Maine AG)Confirmed
  2. Aug 2023Prudential Insurance Co. of America revises Maine filing to at least 320,840 people. (Teiss)Confirmed
  3. 4-5 Feb 2024Intruder gets into Prudential systems; detected the next day. (SEC 8-K)Confirmed
  4. Feb 2024Alphv/BlackCat lists Prudential on its leak site. Prudential has not named the attacker. (SecurityWeek)Unverified claim
  5. Late Mar 2024Maine AG filing: 36,545 people; names, addresses, licence and ID numbers. (SecurityWeek)Confirmed
  6. Late Jun 2024Updated Maine filing raises the total to 2,556,210 people. (SecurityWeek)Confirmed
  7. Jun 2025$4.75M class settlement preliminarily approved (D.N.J. No. 2:24-cv-06818). (ClassAction.org)Reported

Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.

PGIM / Prudential Financial incident timeline, in detail

Confirmed = acknowledged by PGIM / Prudential Financial, a regulator filing or a court. Reported = credible reporting PGIM / Prudential Financial has not fully confirmed. Unverified claim = an attacker or leak-site claim.

Feb 2024 - Jul 2025ConfirmedNetwork intrusion / suspected ransomware group

Intrusion into Prudential systems; count rises from 36,545 to 2,556,210 people

What happened. Prudential’s 8-K (Item 1.05) says it detected on 5 February 2024 that, beginning 4 February, a threat actor had gained unauthorized access to some of its systems. It said the actor, which it suspected was a cybercrime group, accessed company administrative and user data and a small percentage of user accounts belonging to employees and contractors, and that it had no evidence at that point that customer or client data was taken. The Alphv/BlackCat ransomware group listed Prudential on its leak site about a week later, SecurityWeek reported; Prudential did not name the attacker.

Impact. The Maine AG filing (late March 2024, for Prudential Insurance Company of America) listed 36,545 people and names, addresses, driver’s licence numbers and non-driver ID card numbers, per SecurityWeek. An updated filing in late June 2024 gave 2,556,210 people. Prudential offered two years of credit monitoring. A class action in New Jersey federal court settled for $4.75 million (preliminary approval 5 June 2025), per ClassAction.org; Prudential did not admit wrongdoing.

Sources: Prudential Financial Form 8-K (SEC), Feb 2024 · SecurityWeek, 14 Feb 2024 · SecurityWeek, 2 Apr 2024 (Maine filing) · SecurityWeek, 1 Jul 2024 (2.5M update) · ClassAction.org, 15 Jul 2025 (settlement)

May - Aug 2023ConfirmedThird-party / file-transfer software

MOVEit hack at vendor PBI exposes at least 320,840 Prudential customers

What happened. Pension Benefit Information (PBI), a vendor Prudential used, said an unauthorized party accessed one of its MOVEit Transfer servers on 29 and 30 May 2023 and downloaded data, using the zero-day flaw exploited by the Clop group. This was PBI’s system, not Prudential’s: PBI’s notice says Prudential’s information systems and operations were not affected.

Impact. Prudential Insurance Company of America first filed with the Maine AG for 89 people, then revised the figure to at least 320,840, per Teiss. Data: names, addresses, dates of birth, phone numbers and Social Security numbers. PBI offered two years of credit monitoring and identity restoration through Kroll.

Sources: Teiss, 15 Aug 2023 (Maine AG filings)

Where the reports disagree

  • How many people in 2024? Prudential’s first Maine filing said 36,545; the updated filing said 2,556,210. Both come from Prudential; the later figure is the one used here.
  • What was taken in 2024? The February 8-K said there was no evidence customer data had been taken; the later state filings list names, addresses and licence or ID numbers for millions of people. The investigation found more than the first filing knew.
  • When did it happen? The 8-K says access began 4 February 2024. ClassAction.org’s settlement summary gives 16 February 2024 as the breach date; we follow the 8-K.
  • MOVEit count: Prudential’s Maine filings went from 89 to at least 320,840 people. PBI’s own filings covered all its clients (about 371,359 in Maine, later at least 1,209,825 to HHS, per Teiss), so they are not Prudential-only figures.
  • Name confusion: Prudential plc (UK/Asia) and Prudential’s Japanese businesses are reported separately; this page covers Prudential Financial, Inc. and PGIM only.

The pattern across the record

First counts were far too low

Both incidents started with a small number (36,545; 89) and grew by orders of magnitude (2,556,210; 320,840) once the data was reviewed. Early filings are a floor, not an estimate.

Identity documents, not passwords

The 2024 data was licence and ID numbers with names and addresses; the 2023 vendor data included Social Security numbers and birth dates. That mix feeds identity fraud and convincing impersonation, not account logins.

Vendors hold the full customer file

PBI provides compliance and operational support to insurers and pension funds, so it held Social Security numbers for hundreds of thousands of Prudential customers. Its file-transfer server, not Prudential’s network, was the weak point in 2023.

What it means for PGIM / Prudential Financial customers — and what to do

If you got a Prudential letter in 2023 or 2024, the risk is identity fraud using your licence, ID or Social Security number, and scams that quote your details to sound like Prudential.

  1. 1.Freeze your credit

    A freeze with the three US bureaus is free and stops new-credit fraud using a stolen SSN or licence number.

    SSN exposure action plan
  2. 2.Read which data your letter lists

    The 2023 (vendor) and 2024 (Prudential) letters list different data. Check which one you got and whether monitoring is still active.

    Breach notice decoder
  3. 3.Check your state’s licence-number rules

    If your driver’s licence number was taken, ask your licensing agency whether it can flag or replace the number.

  4. 4.Treat “Prudential” calls and emails as suspect

    Call back on the number on your policy documents before confirming anything or moving money.

    Identity protection lab

CISO takeaways

Plan for the count to grow

Write your notification plan for a number that may rise a hundredfold after review.

Notification clock calculator
Run the vendor-told-us scenario

Practise the first days after a supplier says it lost your customers’ data.

Vendor Breach Lab
Score ransomware readiness

The 2024 intrusion was claimed by a ransomware group. Check detection, containment and recovery.

Ransomware readiness scorecard

Sources

Company statements and regulator filings first, then reputable reporting. Reviewed November 13, 2026.

  1. 1.Prudential Financial, Form 8-K, Item 1.05 — SEC EDGAR, 13 Feb 2024
  2. 2.Prudential Financial Discloses Data Breach — SecurityWeek, 14 Feb 2024
  3. 3.36,000 Impacted by Prudential Financial Data Breach — SecurityWeek, 2 Apr 2024
  4. 4.Prudential Financial Data Breach Impacts 2.5 Million — SecurityWeek, 1 Jul 2024
  5. 5.Prudential Insurance Company of America says MOVEit Transfer hack impacted 320k customers — Teiss, 15 Aug 2023
  6. 6.$4.75M Prudential Financial settlement ends class action over February 2024 data breach — ClassAction.org, 15 Jul 2025

Frequently asked questions

Was Prudential hacked?

Yes. Prudential Financial told the SEC that an intruder got into some of its systems on 4 February 2024. Its updated Maine AG filing listed 2,556,210 affected people. In 2023, a separate MOVEit hack at its vendor PBI exposed at least 320,840 Prudential customers.

What data was taken in the Prudential data breach 2024?

Per the Maine AG filings as reported by SecurityWeek: names, addresses, driver’s licence numbers and non-driver ID card numbers. Prudential offered two years of credit monitoring.

Who hacked Prudential?

Prudential said it suspected a cybercrime group and has not named it. The Alphv/BlackCat ransomware group claimed the attack on its leak site in February 2024; that is a claim, not a Prudential confirmation.

Is there a Prudential data breach settlement?

Yes. In re Prudential Financial, Inc. Data Breach Litigation (D.N.J., No. 2:24-cv-06818) settled for $4.75 million, with preliminary approval on 5 June 2025, per ClassAction.org. Claim deadlines have passed. Prudential did not admit wrongdoing.

Was PGIM hacked?

We found no incident naming PGIM. The 2024 intrusion was disclosed by its parent, Prudential Financial, and the state filings were made for Prudential Insurance Company of America.

Was Prudential part of the MOVEit breach?

Yes, through its vendor Pension Benefit Information (PBI). Prudential Insurance Company of America’s revised Maine filing listed at least 320,840 people; data included Social Security numbers and birth dates. PBI said Prudential’s own systems were not affected.

More in the Breach Index

Same sourced, verification-tagged timeline, company by company — compare how peers have fared.

Coinbase data breachFinancial services

Bribed support agents, 69,461 customers, an 8-K.

TransUnion data breachFinancial services

4.4M people via a third-party support app (2025).

Apollo Global Management data breachFinancial services

Social engineering and cloud platforms.

Invesco data breachFinancial services

No confirmed breach; 2024 vendor ransomware in Japan

Or see the full Breach Index and how to read it.

Independent analysis for security-leadership education; not affiliated with or endorsed by PGIM / Prudential Financial. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.