Where does the Variable Annuity Life Insurance Company (“VALIC”) case file come from?

Every entry is taken from the breach report Variable Annuity Life Insurance Company (“VALIC”) lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Variable Annuity Life Insurance Company (“VALIC”) Data Breach

This file collects the dated facts on record for the Variable Annuity Life Insurance Company (“VALIC”) incident. The state report is dated August 27, 2025.

Timeline

August 27, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: August 27, 2025
Receiving office: Massachusetts Attorney General

Case notes

The Variable Annuity Life Insurance Company (VALIC), a financial services and insurance provider, formally reported a security incident to the Massachusetts Attorney General's Office on August 27, 2025. The exact nature of the breach, the types of personal information involved, and the number of individuals affected remain unspecified as the investigation is ongoing.

VALIC manages sensitive customer information for retirement accounts, annuities, and investment portfolios. While details of this particular incident are limited, security events impacting financial institutions often involve unauthorized access to systems holding extensive personal and financial records. The exposure of such information can lead to significant risks for those affected.

Individuals whose personal information is compromised may face an increased risk of identity theft, financial fraud, or other malicious activities. The full scope of potential impact is still being determined as the company continues its investigation into the incident.

It is advisable for anyone who receives a notification regarding this breach to remain vigilant. Review financial account statements and credit reports regularly for any unusual activity. Consider placing a fraud alert or security freeze on your credit files as a proactive measure to help prevent unauthorized accounts from being opened in your name.

Additionally, be cautious of unsolicited communications, such as emails, texts, or phone calls, that request personal or financial details, as these could be phishing attempts. Changing passwords for online accounts and enabling multi-factor authentication where available can also enhance your digital security.

Questions about this case file

Where does the Variable Annuity Life Insurance Company (“VALIC”) case file come from?: Every entry is taken from the breach report Variable Annuity Life Insurance Company (“VALIC”) lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Variable Annuity Life Insurance Company (“VALIC”) breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files