Business Context and Reporting Period
Company: Genworth Financial, Inc.
Filing Type: Form 8-K (Current Report)
Date of Report: June 16, 2023
Event: Notification of a third-party cybersecurity incident involving vendor PBI Research Services and the MOVEit file transfer system.
Key Financial Metrics
This filing does not contain specific financial statements, revenue, profit, cash flow, or debt figures. The report focuses on a non-financial operational event. The Company states it does not currently believe the incident will have a material adverse effect on its business, operations, or financial results.
Material Changes and Incident Details
- Incident Scope: A security event at third-party vendor PBI Research Services resulted in the unauthorized acquisition of data.
- Impact on Company: Approximately 2.5 to 2.7 million policyholders or customers of the Company's life insurance businesses had personal information (including Social Security numbers) unlawfully accessed.
- Operational Status: The Company's own information systems, including financial systems, were not impacted. There has been no material interruption to business operations.
- Business Segment Exclusion: The Enact mortgage insurance business was not affected by the incident.
- Vendor Function: PBI is used to satisfy regulatory obligations regarding death searches for life insurance, long-term care, and annuity policies.
Outlook, Risks, and Management Commentary
Management Response: The Company launched an investigation with PBI. Affected individuals will be notified and offered credit monitoring and identity theft protection services. PBI has rectified the vulnerability.
Risks and Contingencies:
- Ongoing investigation may reveal additional information.
- Potential regulatory inquiries and litigation.
- Remediation expenses and other potential liabilities are being measured.
- Legal, reputational, and financial risks associated with the cyber incident.
Forward-Looking Statements: The Company notes that actual results may differ materially from expectations due to the uncertainties surrounding the incident's full impact and costs.
Investor Verification Checklist
- Verify the final count of affected individuals once the investigation concludes.
- Monitor for updates on remediation costs and potential liability estimates in future filings.
- Track any regulatory inquiries or litigation filings related to the data breach.
- Review the Company's insurance coverage and contractual indemnification terms with PBI.
- Check for any subsequent announcements regarding material financial impact if the initial assessment changes.