Variable Annuity Life Insurance Company (“VALIC”) data breach

Clerk's notes

Variable Annuity Life Insurance Company (VALIC), a prominent financial services and insurance institution, filed a data breach notice with the Massachusetts Attorney General's Office on August 27, 2025. The company's status is currently listed as "investigating," indicating ongoing efforts to understand the full nature and extent of the security incident. This report suggests that personal information maintained by VALIC may have been exposed.

Financial institutions like VALIC are frequent targets for cyberattacks, which can involve sophisticated methods such as unauthorized entry into databases, malware deployment, or exploiting vulnerabilities in third-party vendor systems. While the specific mechanics of this incident are still under review, such breaches often result from threat actors circumventing security measures to access sensitive customer data.

Exposure of personal information can create significant risks for affected individuals. This may include an increased risk of identity theft, fraudulent financial activity, or other forms of misuse of your data. It is important to remain vigilant and monitor your accounts for any suspicious activity following a notification.

As a licensed financial institution, VALIC is subject to strict regulatory requirements under laws such as the Gramm-Leach-Bliley Act (GLBA) and Massachusetts data privacy statutes, which mandate robust safeguards for non-public personal information. A breach of this nature raises questions about the adequacy of security controls in place to protect the sensitive financial assets and personal records entrusted to the company's care.

If you have received an official data breach notification letter from Variable Annuity Life Insurance Company, it confirms that your personal information was potentially compromised. Receiving such notice may establish your legal standing to explore options for recourse. Our firm is actively investigating potential claims for those affected. You do not need to experience direct financial fraud to seek legal counsel; the increased risk of identity theft itself can constitute harm. Contact us for a free case review to understand your legal options.

If a notification letter about this breach reached you, see every Massachusetts data breach on file or browse all cases.