Material Event – Form 8-K

On October 16, 2023, Reinsurance Group of America, Incorporated (the "Company") determined that the Company had experienced a cybersecurity incident in which an unauthorized third party gained access to certain technology systems of the Company. The Company currently believes that this unauthorized third party gained such access on October 15, 2023. Following detection of the incident, the Company initiated response protocols, including deploying a number of containment measures such as taking certain systems offline as a precautionary measure. Additionally, following such detection, the Company launched an investigation, which remains ongoing, engaged the services of cybersecurity and forensics experts and advisors, and notified certain insurance regulatory authorities and law enforcement authorities.

Based on the Company's investigation to date, the Company does not believe that any client policy holder data was accessed or extracted. The Company has also identified no evidence to date of encryption or ransomware. The Company has been working to bring its systems back online and resume normal operations, and the functionality of most of the Company's online systems was restored earlier this week.

Additionally, the Company has been in communication with clients about the incident and its restoration progress. The Company will ensure that any appropriate notification is provided to individuals affected by this incident.

We have incurred, and expect to continue to incur, certain incremental expenses related to this incident, including expenses to respond to, remediate and investigate this incident. While the Company's investigation is ongoing, based on information currently known, the Company does not believe this incident will have a material adverse effect on its business, operations or financial results.

The Company maintains insurance, including cybersecurity insurance, which the Company believes is commensurate with its size and the nature of its operations.

Cautionary Note regarding Forward-Looking Statements

This Current Report on Form 8-Kcontains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995 and federal securities laws that may relate to, among other things, statements regarding the Company's current beliefs, understanding and expectations regarding this cyber incident and its anticipated impact on the Company's business, operations and financial results. Forward-looking statements are based on management's current expectations and beliefs concerning future developments and their potential effects on the Company. Forward-looking statements are not a guarantee of future events, results or performance and are subject to a variety of risks and uncertainties, many of which are beyond the Company's control. Future events and actual results and performance could differ materially from those set forth in, contemplated by or underlying the forward-looking statements. Factors that could cause actual events, results or performance to differ from forward-looking statements include legal, reputational, and financial risks resulting from this cyber incident, the Company's ongoing investigation of the incident, including the Company's potential discovery of additional

information related to the incident in connection with this investigation or otherwise, the potential impact of this incident on client relationships and the Company's business, the extent of available insurance coverage, any potential regulatory inquiries and/or litigation to which the Company may become subject in connection with this incident, the extent of remediation and other additional costs that may be incurred by the Company in connection with this incident, and the risks set forth in Item 1A - "Risk Factors" in the Company's Annual Report on Form 10-Kfor the year ended December 31, 2022, as may be supplemented by Item 1A - "Risk Factors" in the Company's subsequent Quarterly Reports on Form 10-Qand in the Company's other periodic and current reports filed with the SEC. These forward-looking statements speak only as of the date on which they are made. The Company does not undertake any obligation to update these forward-looking statements, whether as a result of new information, future events or otherwise, except as required under applicable securities law.