Breachesby GlyphPrudential Insurance Company of America
Disclosed Dec 28, 20222,625,662 affectedConfirmed
The covered entity (CE), The Prudential Insurance Company of America, reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 36,092 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, the media and affected individuals. In response to the breach, the CE implemented additional technical and security safeguards.
What is known
| People affected | 2,625,662 (as reported by the organization) |
|---|---|
| Disclosed | Dec 28, 2022 |
| Discovered | Feb 5, 2024 |
| Happened | Feb 4, 2024 |
| Attack | Phishing |
| Data exposed | NamesHealthCredentials and tokens |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Prudential Insurance Company of AmericaWashington Attorney General breach notice: Prudential Insurance Company of AmericaNotice letter filed with the Delaware DOJ: Prudential Insurance Company of AmericaOregon DOJ breach notice: Prudential Insurance Company of AmericaIndiana Attorney General 2024 data breach report: Prudential Insurance Company of AmericaIndiana Attorney General 2023 data breach report: Prudential Insurance Company of AmericaHHS OCR breach report (archive, resolved): Prudential Insurance Company of America (Health Plan, NJ)
Notices filed
Indiana AG1 personCalifornia AGCount not statedWashington AG39,674 peopleCalifornia AGCount not statedOregon DOJ320,840 peopleIndiana AG374 peopleIndiana AG43 peopleCalifornia AGCount not statedDelaware DOJ19,433 peopleIndiana AG61,560 peopleHHS archive36,075 peopleWashington AG872 peopleOregon DOJCount not stated
Other breaches at Prudential Insurance Company of America
Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,945 affectedInsuranceUSFeb 18, 2020Breach, details not statedBreach notice filed with the California AG, details not stated.1,945 affectedInsuranceUSMar 27, 2018Breach, details not statedBreach notice filed with the California AG, details not stated.InsuranceUSMar 4, 2013
History of this record
empty to The covered entity (CE), The Prudential Insurance Company of America, reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 36,092 individuals. The PHI involved included names, addressby backfillSource
2023-01-13 to 2022-12-28by backfillSource
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdfby backfillSource
[] to ["names","health","credentials"]by backfillSource
empty to organizationby backfillSource
empty to 2625662by backfillSource
unknown to phishingby backfillSource
empty to 2024-02-05by backfillSource
2023-07-31 to 2023-01-13by backfillSource
2024-03-29 to 2023-07-31by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.