Reporting a vulnerability

If you believe you’ve found a potential security issue in a Nationwide® system or application, we appreciate your bringing it to our attention.

Send details of the issue to vulnerabilitydisclosure@nationwide.com, including:

The affected system, website or application
Steps to reproduce the issue
Any supporting screenshots, logs or technical details

We will acknowledge your submission within 3 business days
Our security team will review and investigate the issue
We’ll follow up if additional information is needed

Please do not publicly share details of the vulnerability until we’ve confirmed it has been resolved.

Conduct denial-of-service or load testing
Attempt social engineering or phishing against Nationwide associates
Use malware or take actions that could harm systems, data or customers

We value responsible security research and appreciate your help in keeping Nationwide's systems secure.