TruStage, the Madison, Wisconsin-based insurer whose product lines include Funeral Preplanning Insurance, is still rebuilding from a cybersecurity attack it identified on July 11, 2026. Today marks 10 weeks and four days since that date. The company's main outage page describes the work as recovery from "the cybersecurity attack identified on July 11." Its hub for preneed coverage says systems have been affected "since July 11, 2026, when TruStage identified the incident." Preneed coverage is insurance arranged ahead of a death to pay funeral costs. American Banker's Carter Pape reported Aug. 12 that TruStage disclosed the incident publicly on July 15, 2026, four days after the attack was identified.
In the "Latest update - Sept. 18" section of the main outage page, claims submission, claims processing and claims payout are each listed as "Partially available." Policy and contract servicing, from one-time payments to canceling a policy, carries the same label. So do disbursements, including withdrawals and surrenders. A surrender is the cashing-out of a policy. The preneed hub's status line still reads "Investigating," last updated Sept. 22, 2026, at 10:23 AM CT. The claims-status dashboard, stamped Sept. 23, lists the same three stages, "Submission," "Processing" and "Payout," all "Partially available."
On the security side, the preneed hub's question-and-answer section says Mandiant "has found no evidence of threat actor activity in the affected environments since July 11, 2026." It points to an Investigation Memo updated Aug. 27 for that finding.
Funeral Preplanning Insurance, a named TruStage line with its own outage hub, carries one direct instruction for funeral providers: "US funeral homes should submit the initial notification of loss." The same hub's question-and-answer section confirms applicable grace periods, which give policyholders extra time to pay, for "Life, Accidental Death and Dismemberment, and Preplanning Insurance," and says "ACH billing activity has resumed for certain Life, AD&D and Preplanning customers."
In an Aug. 13 release, TruStage said it had "started to pay claims across our business, including preplanning/funeral claims, GAP claims and debt protection/credit insurance benefits." GAP, short for guaranteed asset protection, is an auto-loan add-on that pays the difference between a vehicle's value and its loan balance. According to the claims-status dashboard, all pre-outage GAP claims have been processed except those "awaiting required information from members or insurance carriers." The dashboard also reports about 20% of post-outage claims processed, with contact made on roughly another 50% of the post-outage inventory. In its rolling summary of TruStage briefings, last updated Sept. 23, CrossState relays that the company is "approximately halfway through paying Life claims received before July 11," an estimate TruStage gave as of Sept. 17.
Ninety-three percent of credit unions partner with TruStage, and the company protects 42 million consumer relationships, according to American Banker, which cited TruStage's own materials.
Litigation has followed. American Banker reported Aug. 12 that at least 14 proposed class actions are pending against TruStage in the U.S. District Court for the Western District of Wisconsin. A proposed class action asks a judge to let the plaintiffs represent a larger group of people with similar claims. A July 29 court order counted 13 suits filed since July 17. The 14th suit, known as Collette, arrived the same day, and that count is now five weeks old.
The first-filed complaint came from Bessemer System Federal Credit Union against TruStage Financial Group, case 3:26-cv-00644, filed July 17, 2026. A motion to consolidate followed on July 23. According to the CourtListener docket, entry 7, dated July 27, records a "waiver sent on 7/26/2026" and an "answer due 9/24/2026." A waiver of service is the step in which a defendant forgoes formal delivery of the complaint and agrees to answer on a schedule. As of Sept. 23, no answer or extension appears on the docket. The most recent substantive filing is bigger than a scheduling step: on Sept. 15, lawyers for the plaintiffs and lawyers for TruStage and Align Credit Union filed a joint motion asking the court to combine the cases, including any similar suits filed later, and then stay them. A stay is a court-ordered pause of a lawsuit. The parties say the pause would let TruStage continue its investigation and "determine to whom, if anyone, it will be required to send breach notice letters." If the pause is granted, the parties agreed to file a joint status report with the court every 60 days. The case was reassigned Aug. 11 to District Judge William M. Conley.
Whether any data was accessed has not been determined. TruStage's Aug. 13 release put answers on data impact as "likely 2 to 3 months from now." According to CrossState's Sept. 18 summary of company briefings, TruStage expected the data-impact investigation to take approximately two more months as of Sept. 17. No determination had been announced as of Sept. 23.
For families arranging a funeral now, funeral homes submit the initial notification of loss to begin the claim process, and grace periods have been extended for preplanning policies. Claims can still be submitted, though the outage page lists processing as "Partially available."
The nearest court deadline in the litigation is tomorrow: TruStage's answer in Bessemer, due Sept. 24, unless the court first grants the joint request to pause the cases. This article will be updated when the court acts.
*Sources: TruStage main outage page, "Latest update - Sept. 18" (trustage.com/outage), TruStage preneed outage hub last updated Sept. 22, 2026 (trustage.com/outage/preneed), TruStage claims-status dashboard stamped Sept. 23, 2026 (trustage.com/outage/claims-status), TruStage newsroom release, Aug. 13, 2026, American Banker, Carter Pape, Aug. 12, 2026, CrossState rolling summary of TruStage briefings, last updated Sept. 23, 2026, CourtListener docket, entry 7, July 27, 2026, and Joint Motion to Consolidate and Stay, docket entry 19, Sept. 15, 2026, Bessemer System Federal Credit Union v. TruStage Financial Group, case 3:26-cv-00644, W.D. Wis. All TruStage and CrossState pages cited were archived by Obitley on Sept. 23, 2026.*
Get investigations like this in your inbox
Free. Every Tuesday.