T. Rowe Price data breach history (2016-2026): two vendor breaches, no confirmed hack of its own systems
T. Rowe Price is a large US fund manager and retirement-plan recordkeeper. This page records the security incidents that reached its clients since 2016, all of them so far at vendors, and what plan participants should do.
Short answer
Was T. Rowe Price hacked?
We found no confirmed breach of T. Rowe Price’s own systems from 2016 to 2026 in the sources we read. Two 2023 vendor breaches did expose data on people in plans it administers.
In 2023 Pension Benefit Information (PBI), a vendor to T. Rowe Price Retirement Plan Services, had its MOVEit Transfer server breached. PBI told T. Rowe Price Retirement Plan Services on 14 July 2023, and letters went out on 27 July. Later that year ransomware hit Infosys McCamish Systems, which ran T. Rowe Price’s nonqualified plan recordkeeping platform. T. Rowe Price said its “systems were not compromised”; Infosys’s filings later put the total across all its clients at 6,078,263 people.
Timeline at a glance
14 Jul 2023PBI tells T. Rowe Price Retirement Plan Services its MOVEit server was breached. (BeyondMachines)Confirmed
27 Jul 2023TRP sends breach letters to affected participants. (BeyondMachines)Confirmed
2 Nov 2023Infosys McCamish tells T. Rowe Price of an event on its nonqualified plan platform. (PLANADVISER)Reported
11 Sep 2024Infosys breach total put at 6,078,263 people across clients incl. T. Rowe Price. (PLANADVISER)Reported
Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
T. Rowe Price incident timeline, in detail
Confirmed = acknowledged by T. Rowe Price, a regulator filing or a court. Reported = credible reporting T. Rowe Price has not fully confirmed. Unverified claim = an attacker or leak-site claim.
29 Oct-2 Nov 2023 (filings 2024)ReportedVendor breach (Infosys McCamish Systems)
Infosys McCamish ransomware hits T. Rowe Price nonqualified plans
What happened. Infosys McCamish Systems, a vendor running T. Rowe Price’s nonqualified plan recordkeeping platform, was hit by ransomware with unauthorized activity from 29 October to 2 November 2023. T. Rowe Price said its own security team confirmed “T. Rowe Price systems were not compromised” and restricted connections to the vendor. It was the vendor’s systems.
Impact. Infosys reported 6,078,263 people in total across its clients, with data including SSNs, dates of birth, account information and ID numbers, per PLANADVISER. T. Rowe Price’s own share was reported as fewer than 10,000 people (via search). Nonqualified accounts came back online on 5 December 2023 (via search).
PBI’s MOVEit server breach exposes T. Rowe Price plan participants
What happened. Pension Benefit Information, a T. Rowe Price Retirement Plan Services vendor, had its MOVEit Transfer server breached through the May 2023 zero-day. PBI informed TRP on 14 July 2023 and TRP sent letters on 27 July. It was the vendor’s systems.
Impact. BeyondMachines reported no count. Search results show a Maine AG entry with 463 people, 5 in Maine, and Social Security numbers (via search). Two years of Kroll monitoring was offered (via search).
Infosys numbers: the 6,078,263 total covers every Infosys McCamish client, not T. Rowe Price alone. T. Rowe Price’s share (reported as fewer than 10,000) is from a search snippet we could not open.
The pattern across the record
Every incident was at a vendor
Both events were in 2023 and both were at service providers (PBI and Infosys McCamish) that process plan participant data. T. Rowe Price said its own systems were not involved.
Retirement data travels far
Death-record matching, nonqualified plan administration and file transfer all mean participant SSNs leave the recordkeeper. That is where the exposure has been.
What it means for T. Rowe Price plan participants — and what to do
If you got a letter about PBI or Infosys McCamish naming T. Rowe Price, your Social Security number was likely exposed at the vendor. Your T. Rowe Price account login was not involved, per the firm.
1.Freeze your credit and get an IRS IP PIN
Both are free and are the strongest steps after an SSN exposure.
We found no confirmed breach of T. Rowe Price’s own systems from 2016 to 2026. In 2023 two of its vendors, PBI and Infosys McCamish, were breached and exposed data on some plan participants.
Was T. Rowe Price affected by the MOVEit breach?+
Yes, through its vendor Pension Benefit Information. PBI told T. Rowe Price Retirement Plan Services on 14 July 2023 and letters went out on 27 July 2023.
Was T. Rowe Price part of the Infosys McCamish data breach?+
Yes. Infosys McCamish ran T. Rowe Price’s nonqualified plan recordkeeping platform and was hit by ransomware in late 2023. T. Rowe Price said its own systems were not compromised.
Is there a T. Rowe Price data breach settlement?+
We found no lawsuit or settlement specific to T. Rowe Price in the sources we read.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by T. Rowe Price. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.