TruStage has experienced a cybersecurity incident, proactively shut down portions of its network to contain the issue, and engaged outside cybersecurity experts. At this time, their systems remain offline and are expected to remain unavailable while forensic investigators complete their work.
We are actively communicating with our contacts at TruStage, monitoring the TruStage cybersecurity incident, and will share available resources and information as the situation develops. At this stage, facts remain limited.
Luminate will continue to provide updates as information becomes available.
For the most updated information visit TruStage’s Outage Page
TruStage has launched information resources for members who may have questions or need support.
The FAQ page provides general information and answers to common questions. The claims submission page allows members to begin the claims process online.
- Members who need to start a claim for Credit Insurance, Debt Protection or Consumer Insurance (Life/Accidental Death & Dismemberment), can use the above claims page link to get started.
- GAP issuance workaround was sent to all primary lending contacts. If your staff does not have the details, please contact the TruStage representatives below.
TruStage’s Louisiana Representatives
Steps You May Want to Consider
Please note that whether any action is appropriate will depend on your credit union’s specific product & service relationship with TruStage, risk tolerance, contractual obligations, operational dependencies, and guidance from legal counsel or designated internal decision makers. The below are considerations and not directives.
- Review your cyber insurance policy and incident response.
- Be aware of elevated risks of phishing or social engineering attempts that reference this incident, targeting either your employees or members.
- Continue monitoring official TruStage correspondence for updates on their website.
- Inventory current products or services your credit union has with TruStage, and identify which, if any, involve direct exchange of sensitive data.
The NCUA is aware of this event. If your credit union determines it is a reportable event to the NCUA, the NCUA has informed us that it is sufficient to call or email the NCUA, provide your credit union name, and inform them that you are reporting regarding the TruStage cybersecurity event. You can call the NCUA at 1.833.CYBERCU (1.833.292.3728) and leave a voicemail or email at cybercu@ncua.gov to accomplish that report.
For Additional Assistance Please Reach out to Luminate’s Innovations Team
Cybersecurity Incident Response Toolkit
Cybersecurity incidents are occurring with increasing frequency across our industry and beyond, reinforcing the importance of being prepared before an incident occurs. With that in mind, the Luminate team has developed an Incident Response Toolkit as a general resource to help your credit union strengthen its preparedness and response planning.
The toolkit provides practical guidance and resources that can help your team prepare for, navigate, and respond to a variety of cybersecurity incidents. It is intended to serve as an ongoing resource for our members.