Pension funds are embedding artificial intelligence into critical operations, but many lack the governance and security controls to protect sensitive member data and financial assets. Chatbots now handle member inquiries, AI models support actuarial forecasts and fraud detection, and security copilots assist internal teams. For many pension plans, AI is no longer experimental technology; it has become critical infrastructure. Yet this rapid adoption is exposing trustees to cybersecurity and fiduciary risks that regulators are beginning to scrutinize.

The problem is twofold: AI simultaneously expands the attack surface while making attackers more capable. Pension funds are attractive targets because they combine large financial flows with highly sensitive personal data and complex vendor ecosystems. Attackers can now use AI to generate convincing spear-phishing emails, clone executive voices, and create synthetic video for fraud attempts. Recent incidents in the financial sector have already involved cloned voices authorizing wire transfers and synthetic identities bypassing authentication controls.

What Makes Pension Plans Vulnerable to AI-Powered Fraud?

The pension sector faces specific vulnerabilities that traditional security measures were not designed to address. A benefits manager could receive a convincing "urgent" call from a cloned executive requesting an off-cycle payment. A member-services representative might hear a familiar voice requesting banking changes. A trustee's compromised personal email could become the entry point for business email compromise attacks. These scenarios are no longer hypothetical; they reflect the real capabilities of current AI-powered social engineering tools.

The threat landscape has transformed dramatically. Globally, AI-powered cyberattacks have increased 72 percent year-over-year, with 87 percent of organizations reporting they experienced an AI-driven cyberattack in the past year. Phishing remains the primary intrusion vector, and AI has made it dramatically more effective: 82.6 percent of phishing emails now contain AI-generated content, and AI-generated phishing emails achieve click rates four times higher than traditional phishing emails.

For pension plans specifically, AI errors can quickly become fiduciary failures. A chatbot hallucination in retail customer service may be inconvenient; a hallucinated eligibility decision or miscalculated retirement benefit is something else entirely. If an AI system incorrectly flags a beneficiary as ineligible, misroutes a payment, or understates liabilities, the pension plan, not the software vendor, remains accountable to members.

How Should Pension Plans Strengthen Their AI Security Defenses?

• Implement Phishing-Resistant Authentication: Pension plans should prioritize phishing-resistant multi-factor authentication (MFA) such as FIDO2 keys or passkeys, strong email protection including DMARC (Domain-based Message Authentication, Reporting and Conformance), and mandatory out-of-band verification for changes to banking or beneficiary information.
• Train Staff on AI-Enabled Fraud Recognition: Just as important as technology is training staff to recognize AI-enabled fraud attempts, including deepfake audio and video. The biggest weakness is often not technology, but organizational priority.
• Establish AI-Literate Vendor Oversight: Pension plans depend heavily on record-keepers, custodians, actuarial firms, payroll providers, and Software-as-a-Service (SaaS) platforms, many of which are rapidly embedding AI into their products. Trustees should expect clear answers from vendors about what AI models are being used, where data is processed, whether plan data is used for training, which subcontractors are involved, and what controls exist on termination.
• Maintain an AI Use Case Inventory: Every plan should maintain a current inventory of AI use cases and include AI-specific risks directly in the cybersecurity risk register. Risks such as prompt injection, deepfake fraud, shadow AI usage by employees, and insecure vendor integrations should have clear owners and mitigation plans.
• Test Incident Response Capabilities: Plans should test their preparedness through AI-era incident simulations, including deepfake wire-fraud attempts, ransomware at a record-keeper, mass personally identifiable information (PII) leakage through AI tools, or AI-driven benefit errors, practiced with legal, privacy, communications, and vendor teams involved.

Contractual protections should become baseline expectations. Trustees should require vendors to commit to "no training on plan data," rapid breach notification, and audit rights. A compromised AI plugin could quietly exfiltrate plan census data, while AI summarization tools may expose confidential board discussions if prompts are logged or reused for model training.

Why Are Regulators Starting to Pay Attention?

Regulators are already signaling that cybersecurity is part of prudent oversight. The U.S. Department of Labor's Employee Benefits Security Administration (EBSA) has issued cybersecurity best practices covering governance, encryption, MFA, audits, and vendor oversight. Public-company sponsors and investment advisers also face Securities and Exchange Commission (SEC) disclosure expectations, while the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) impose privacy and breach-notification obligations.

AI raises the bar further by introducing new operational and governance risks. The standard of prudence is changing. Pension plans that can demonstrate active AI governance, evolving controls, and tested response capabilities will be far better positioned when AI-enabled incidents inevitably hit the sector.

"Trustees do not need to become AI engineers, but they do need sharper governance practices," stated Srikumar Bala, a senior technology and operations executive with deep experience in enterprise transformation and cybersecurity.

Srikumar Bala, Senior Technology and Operations Executive, Educational Employees' Supplementary Retirement System of Fairfax County

The weakest link in an AI-enabled environment will ultimately be chosen by attackers. Trustees must decide now how strong they want that link to be. The pension industry's rapid adoption of AI tools is creating both opportunity and risk. Without proper governance, oversight, and security controls, pension plans could face significant fiduciary liability, regulatory scrutiny, and member trust erosion. The time to act is now, before an AI-enabled incident forces the issue.