Breach taxonomy
Summary
On February 4, 2024, a threat actor suspected to be a cybercrime group gained unauthorized access to Prudential Financial systems, accessing company administrative and user data from certain IT systems and a small percentage of employee and contractor user accounts. No customer or client data was accessed. Prudential immediately activated its incident response process, engaged external cybersecurity experts, and reported the incident to law enforcement and regulatory authorities. As of the filing date, no material operational impact was determined.
Tagging rationale
ThreatCyber Criminals
Filing states the threat actor is suspected to be a cybercrime group — direct attribution to cybercriminal actors.
MethodsData Exfil
Filing confirms the threat actor gained unauthorized access and accessed data from systems and accounts; no specific attack method is described.