Insurance industry data breaches expose policyholder Social Security numbers, financial information, and, for health insurers in particular, sensitive medical history and claims data alongside standard identity information. These exposures can lead to identity theft, traditional insurance fraud, and medical identity theft depending on the type of coverage and data involved, with health insurance breaches carrying especially serious privacy consequences given the sensitivity of medical claims history. Insurance companies maintain some of the largest stores of long-term personal data of any industry, since policies and claims histories are often retained for years or decades, meaning a breach can expose information about individuals who haven’t interacted with the company recently. Affected individuals may include current policyholders, former policyholders, dependents covered under a family plan, and sometimes claimants who were never customers at all. This page tracks confirmed data breaches at insurance companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.
A ransomware group known as Termite has claimed responsibility for a data breach involving Aon plc, a major professional services and insurance brokerage firm. Aon has not publicly confirmed the incident.
Aon plc Data Breach Exposes Client and Corporate Data Read More »
American Family Connect Insurance Company notified the California Attorney General of a data breach affecting its policyholders, prompting questions about what personal information was exposed and what steps affected customers should take.
United Underwriters notified the California Attorney General of a data breach that may have exposed sensitive customer information. Here is what affected individuals need to know.
United Underwriters Data Breach Exposes Personal and Financial Information Read More »
5Star Life Insurance Company notified the California Attorney General of a data breach that may have exposed sensitive personal and policyholder information belonging to affected individuals.
5Star Life Insurance Company Data Breach Exposes Personal and Policyholder Information Read More »
NSE Insurance Agencies notified California regulators of a data breach that may have exposed customers’ personal and financial information, prompting concerns about identity theft.
NSE Insurance Agencies Data Breach Exposes Personal and Financial Information Read More »
PDCM Insurance notified the Iowa Attorney General of a data breach that may have exposed sensitive personal and financial information belonging to clients and other individuals.
PDCM Insurance Data Breach Exposes Personal and Financial Information Read More »
The Surplus Line Association of California has notified regulators that a data breach exposed Social Security numbers, prompting concerns about identity theft among those affected.
Surplus Line Association of California Data Breach Exposes Social Security Numbers Read More »
Honeycomb Programs Inc was targeted by a ransomware group known as direwolf, raising concerns that sensitive personal and insurance information may have been accessed without authorization.
Honeycomb Programs Inc Data Breach Exposes Personal and Insurance Information Read More »
DentaQuest, LLC has notified regulators of a data breach that may have exposed customers’ personal and dental insurance information, prompting concerns over identity theft risk.
DentaQuest, LLC Data Breach Exposes Personal and Dental Insurance Information Read More »
A.G.I.A. LLC, also known as AGIA Affinity, notified customers that a cybersecurity incident at its vendor Doxa Insurance Holdings exposed Social Security numbers and driver’s license numbers.
A.G.I.A. LLC Data Breach Exposes Social Security Numbers and Driver’s License Numbers Read More »