Ontario regulator says a TruStage cybersecurity incident has disrupted pre-need reports and claims
Why this matters: our read
Two notices about five weeks apart, and the second says little more than the first. As of August 28, the disruption was ongoing, with operators unable to reach reports or make claims, and neither notice says what it means for purchasers' information.
The Bereavement Authority of Ontario (BAO) said in a July 24 notice that TruStage Financial Group, Inc., formerly Assurant Life, had reported a recent cybersecurity incident. According to the BAO, TruStage provides pre-need insurance that many Ontario bereavement businesses use to fund prearranged funeral contracts.
The BAO quoted TruStage as saying it “recently identified a cybersecurity incident and immediately activated its incident response and recovery protocols.” The statement, posted on TruStage’s website, says it engaged outside cybersecurity experts. That account is TruStage’s own, relayed by the BAO.
TruStage recently identified a cybersecurity incident and immediately activated its incident response and recovery protocols.
The BAO said Ontario operators that are TruStage clients might be unable to access online reports or submit claims for purchasers. That first notice did not say whether personal information had been compromised.
The BAO’s latest notice, on August 28, said that many Ontario operators were unable to access reports or make claims, and that TruStage was working on remediation and claims processing. The update does not say how many operators or consumers are affected, what the incident was, or when access and claims processing will resume. It is also silent on whether personal information was compromised.
The notices point operators to TruStage, and the August 28 update gives a TruStage inquiry email for affected businesses. The BAO’s notices give no claim-filing procedure beyond that email, and no regulatory action.
Sources
- Published by
- Bereavement Authority of Ontario
- Role
- Primary source
- Item
- Notice to the Profession and Consumers: TruStage cybersecurity incident
- Published
- Published by
- Bereavement Authority of Ontario
- Role
- Primary source
- Item
- Update: TruStage cybersecurity incident
- Published