Prime Retirement Solutions, LLC (PRS), which provides administrative services for certain retirement and pension plans, has notified individuals that an unauthorized third party gained access to one PRS employee’s Office 365 email account. This falls under what’s generally classified as a hacking or system intrusion. PRS says the intruder was able to access and remove data from that account between December 12, 2024 and March 26, 2025. PRS discovered the incident, forced a password reset on the account, hired a cybersecurity firm to investigate, and reported the matter to law enforcement. The investigation concluded on April 4, 2025, and PRS finished reviewing which individuals were affected on June 18, 2025.
The letter is addressed to people whose retirement or pension plan was administered by PRS, meaning current or former employees of an organization that used PRS for plan administration. Not everyone had the same data elements exposed, and PRS says the specific information involved varies by individual.
What information was exposed?
- Name
- Address
- Date of birth
- Social Security number or individual taxpayer identification number
- Financial account number and routing number (for some individuals)
PRS is offering free credit monitoring and identity protection services through IDX. To enroll, visit https://app.idx.us/account-creation/protect or call 1-800-939-4170 using the enrollment code included in your letter. You have until September 26, 2025 to enroll.
What should you do now?
- Enroll in the free IDX credit monitoring and identity protection services before the September 26, 2025 deadline, using the enrollment code included with your letter.
- Because your Social Security number or taxpayer ID may have been exposed, consider placing a fraud alert or a security freeze with Equifax, Experian, and TransUnion — a freeze prevents new credit accounts from being opened in your name without your consent.
- Order and carefully review your free credit reports at annualcreditreport.com, checking for accounts or inquiries you don’t recognize.
- If a financial account number and routing number were involved for you, contact your bank to monitor or, if appropriate, close and reopen the affected account.
- Watch for unexpected tax filings under your name, since Social Security numbers can be used for tax fraud; consider filing early or using an IRS Identity Protection PIN.
- For ongoing peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, such as on the dark web.
- Report any suspicious account activity to your local police, your state Attorney General, and the FTC at www.ftc.gov/idtheft.
If you have questions, Prime Retirement Solutions can be reached at 1-800-939-4170, Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time, except holidays.