Claims of a Data Breach Surface

MetLife, a global financial services provider, plays a crucial role in offering employee benefits like retirement plans, dental coverage, and accident insurance. If your business relies on MetLife, recent reports of a cyberattack may have raised concerns about potential risks.

A ransomware group known as RansomHub, which emerged in 2024, has claimed responsibility for breaching MetLife’s systems. The hackers allege they stole 1 terabyte of data, including confidential company documents.

What the Hackers Say

According to Cybernews, the stolen files contain details from an executive meeting on December 11, where MetLife reportedly discussed internet disruptions affecting customers and investments. Additional documents appear to include investment records, financial reports, and information related to MetLife’s operations in Brazil, Colombia, and Chile. Since all leaked documents were in Spanish, speculation has pointed toward the company’s Latin American division as the primary target.

RansomHub listed MetLife on its website alongside a countdown clock, giving the company 11 days to comply with an undisclosed ransom demand. While the hackers presented what they claimed was proof of the breach, MetLife has firmly rejected the allegations.

MetLife Responds

A spokesperson for MetLife stated that no attack had taken place against the company’s core systems. The only related incident involved Fondo Genesis, a financial services firm in Ecuador, which operates separately from MetLife’s main infrastructure. The spokesperson reassured customers that any issues faced by Fondo Genesis were contained and did not affect MetLife or its broader network.

Further Allegations and MetLife’s Denial

In a separate claim, cybersecurity firm Hudson Rock suggested that nearly 600,000 MetLife records were exposed in a previous breach related to the MOVEit file transfer software. However, MetLife has dismissed this claim as well, stating that neither the company nor its subsidiaries were compromised.

What This Means for Customers

The alleged ransomware attack occurred on New Year’s Eve, with MetLife denying the claims the following day. While RansomHub insists it has infiltrated the company’s systems, no new evidence has surfaced to support the hackers’ assertions.

There is currently no verified risk for millions of individuals and businesses relying on MetLife. However, staying informed and maintaining cybersecurity best practices is always advisable.