TruStage is actively investigating a cybersecurity attack
Current status
Status: Investigating
Last Updated: October 29, 2026 | 8:23 AM CT
Customers may experience difficulty accessing account information, completing transactions or submitting requests online.
Our commitment
- We take the security of our systems and the information entrusted to us seriously.
- Our priority is to restore systems in a safe, secure and responsible manner.
- As we learn more, we will provide additional updates as appropriate.
Service disruption frequently asked questions
-
No. Policies that are active or in a grace period will remain in that status until normal payment processing activities resume. Once operations are restored, you will be able to make a payment or update your payment information as needed. To help accommodate customers affected by this service disruption, once payment processing activities resume, TruStage® will be extending applicable grace periods for Life, Accidental Death and Dismemberment, and Preplanning Insurance. Depending on the timing of your regularly scheduled premium payments, more than one premium payment may become due during the extended grace period.
-
To help accommodate customers affected by this service disruption, TruStage will be extending applicable grace periods once payment processing activities resume. Depending on the timing of regularly scheduled premium payments, more than one premium payment may ultimately become due during the extended grace period. However, TruStage continues to evaluate how premium payments that may have been missed during the service disruption will be handled and will communicate directly with affected customers regarding any actions required.
-
If a policyholder passes away during this time, US funeral homes should submit the initial notification of loss to begin the claim process. Submit a claim here.
Beneficiaries can also submit a notification of loss to begin the claim process.
Some claim processing limitations will remain in place as we continue to recover our servicing systems.
-
We continue working with outside experts to investigate the cyber attack to understand the full impact, including whether any information was accessed. If customer information is found to have been accessed, TruStage will notify anyone affected directly with next steps.
-
Mandiant updated its Investigation Memo on Oct. 9, 2026. Based on the forensic evidence reviewed to date, Mandiant states that TruStage's operating environment is clean, the incident is contained, and it has identified no indication of any active intrusion. Mandiant has not identified threat actor activity within the environments in scope since July 11, 2026. Systems and workstations are returned to service in the new environment only after being validated as clean and safe by Mandiant. Mandiant's investigation and TruStage's recovery efforts remain ongoing.
-
As we continue to learn more, updates will be posted on this outage page.
-
TruStage previously resumed recurring monthly ACH and credit card payments for certain Life, AD&D and Preplanning customers as part of our phased recovery efforts. We also resumed AD&D paper bill mailings and are preparing to resume paper bill mailings for some Preplanning policies. Additional capabilities will continue to come online as systems and processes are tested and validated. TruStage is not currently sending notifications advising customers they are delinquent on a Preplanning policy payment and are about to lose coverage. Customers will not lose coverage due to an inability to make a payment during the service disruption, and applicable grace period accommodation remains in place. If you receive such a notification, do not click on any links, provide personal information, or submit payment information.
-
As systems and processes continue to come back online, some customers may experience delays, processing exceptions or other service-related issues. Teams are monitoring performance closely and working to identify and address issues as quickly as possible.
-
No. Billing restoration is one step in a broader recovery effort. We continue to restore systems and capabilities as they are tested, validated and ready.
-
Payment options remain limited at this time, and online one-time payments are unavailable. We’re unable to mail bills or provide a total past-due balance. You will not lose coverage due to an inability to make a payment during this service disruption. Once billing operations are restored, you will be able to make payments and update payment information as needed. Depending on your billing schedule, more than one premium payment may become due during the extended grace period. For the latest updates, please visit the outage information page.
-
The investigation remains ongoing, supported by Mandiant and Epiq Global. If we determine that customer, employee, or other affected data has been impacted, our intent will be to work with our partners on any communication we may need to do. We also remain committed to supporting partners through any notification or reporting requirements and making that process as straightforward as possible.