Jackson National Data Breach
The 2026 Jackson National data breach was confirmed through the company's consumer notice and Massachusetts's official breach report. The state filing reports at least one affected Massachusetts resident.
This classification is based on a reviewed lower bound; the actual impact and severity may be higher.
Exposed Data Types
3- Names
- Contract details
- Social security numbers
About This Breach
Jackson National Life Insurance Company is a U.S. insurer within Jackson Financial that provides annuity products focused on retirement income. The company uses the Jackson brand in its consumer-facing services.
How Did the Breach Happen?
According to the notice dated July 23, 2026, Jackson determined on July 13 that personal information had been disclosed. The public letter does not state when the disclosure occurred, who received the information, or the method involved. The incident is therefore not characterized as a cyberattack or unauthorized network access.
What Information Was Affected?
The notice identifies the disclosed data as a name, Jackson contract number, and Social Security number. A Social Security number can create heightened risks involving identity theft and fraudulent financial accounts opened in the person's name.
What Did the Company Do?
Jackson said it provided employee coaching, would continue to monitor the matter closely, and would take further appropriate steps to safeguard personal information. The company also offered the affected person two years of Experian IdentityWorks monitoring and identity-restoration assistance.
What Should Affected People Do?
Notice recipients should review activity on Jackson accounts, credit reports, and financial statements for unfamiliar transactions. People whose Social Security number was involved may consider a free credit freeze or fraud alert and can report suspicious Jackson account activity through the company's official customer-service channel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
