TruStage Cyber Incident July 2026

TruStage Cyber Incident: What It Means for Annuity Contracts

If you own a TruStage annuity, the most important update is straightforward: TruStage has stated that annuity assets were not impacted by the cybersecurity attack. The incident has created service and processing challenges, but based on the information available today, it does not appear to have changed annuity contract values, benefits, or the insurer’s underlying obligations.[trustage]

As your advisor, I take a cyber event involving any financial institution seriously. I’m also encouraged by the steps TruStage has reported so far—and I’ll continue to monitor developments so you do not have to decode every update, hold music track, or alarming headline on your own.

—Kit Lancaster, CFP®

The key takeaways

TruStage identified a cybersecurity incident in July and took systems offline while it worked to contain the threat, investigate the event, and safely restore its operations. The company has engaged external cybersecurity specialists, built a clean and isolated technology environment, and has been bringing services back in phases.[trustage][trustage]

For annuity owners, the central point is this:

TruStage has previously confirmed that annuity and retirement-plan assets were not impacted by the cybersecurity attack.[trustage]

That is an important distinction. An outage can affect access and service without changing the actual economics of an annuity contract.

Areas that may be affected

While contract assets do not appear to be affected, the operational impact can still be inconvenient—and, in some cases, time-sensitive.

Area	Possible impact
Customer service	Higher call volumes, longer hold times, and slower response times as call centers reopen and work through demand. [trustage]
Online access	Temporary unavailability or limitations in online account access and certain self-service features while systems are restored. [trustage][trustage]
Transactions	Delays or manual processing for withdrawals, surrenders, transfers, beneficiary updates, or other service requests.
Income payments	A client with a scheduled annuity income payment should promptly report any late or missing payment so it can be documented and escalated.
New business	Processing delays for applications, contract issuance, deposits, allocations, replacements, or other new-contract activity may occur.
Data review	TruStage’s investigation into whether personal information was affected remains ongoing; the company estimated in mid-August that the analysis could take another two to three months. [trustage]

The practical message: the concern today is primarily operational friction, not a reported impairment of annuity assets or policy promises.

Why we remain confident

There are several reasons for cautious confidence.

First, TruStage says it has created a clean, isolated operating environment separate from systems that were affected, potentially affected, or still under investigation. That is a meaningful recovery step: you do not restore a house by moving back into the room with the smoke—you first make sure the structure is safe.[trustage]

Second, AM Best reported on August 7 that its credit ratings for TruStage Financial Group and Union Security Insurance Company remained unchanged following the attack. AM Best said it believed TruStage was taking appropriate action and that the disruption had not materially affected the enterprise’s credit profile.[news.ambest]

That does not mean there is nothing left to watch. AM Best also called the situation fluid and said it would continue monitoring whether the incident affects TruStage’s operations, reputation, or risk-management profile. We will do the same—with a sharper focus on what affects annuity owners.[news.ambest]

What we are monitoring

As your advisor, I will continue to watch for developments that could affect your annuity contract, including:

Confirmation that routine annuity servicing and contact-center support are fully restored.
Processing times for withdrawals, surrender requests, income payments, beneficiary changes, and death claims.
Any announced impact on client information or required notifications.
Any change in AM Best commentary, credit ratings, or financial-strength assessments.
Whether the outage creates meaningful administrative delays for a specific client’s planning needs.

If you have a pending withdrawal, surrender, income payment, beneficiary request, or other annuity service need, please contact us right away. A delay does not necessarily mean a problem with your contract—but it does mean we should document it, follow up, and make sure it is handled correctly.

Our commitment to you

A cybersecurity incident is not a reason to panic or make a rushed change to an annuity contract. It is a reason to stay informed, maintain records, and have an advisor who is paying attention.

We have confidence in TruStage’s reported ability to continue serving clients, contracts, and contractual obligations. At the same time, we will keep monitoring the recovery and any real-world consequences for annuity owners. If the facts change, you will hear it from us clearly and promptly—without the jargon, guesswork, or unnecessary drama.

Do you have a TruStage annuity or a transaction currently in process? Reach out to us today, and we will review your contract, timing needs, and any action items together.

References