Insurance industry data breaches expose policyholder Social Security numbers, financial information, and, for health insurers in particular, sensitive medical history and claims data alongside standard identity information. These exposures can lead to identity theft, traditional insurance fraud, and medical identity theft depending on the type of coverage and data involved, with health insurance breaches carrying especially serious privacy consequences given the sensitivity of medical claims history. Insurance companies maintain some of the largest stores of long-term personal data of any industry, since policies and claims histories are often retained for years or decades, meaning a breach can expose information about individuals who haven’t interacted with the company recently. Affected individuals may include current policyholders, former policyholders, dependents covered under a family plan, and sometimes claimants who were never customers at all. This page tracks confirmed data breaches at insurance companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.
A ransomware group has claimed responsibility for an attack on Carrollins, an insurance agency, alleging it may have exposed personal information. Carrollins has not publicly confirmed the incident.
Carrollins Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed Pekin Insurance systems and may have exposed personal information, though the insurer has not publicly confirmed the incident.
Pekin Insurance Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed and leaked a large cache of client policy and underwriting files tied to insurance brokerage Higginbotham. Higginbotham has not publicly confirmed the incident.
A ransomware group claims to have obtained member, subscriber, and employer group records from Delta Dental of Missouri, though the company has not publicly confirmed the incident.
Hippo Analytics Inc. notified the California Attorney General about a data breach that may have exposed personal information belonging to affected individuals.
Hippo Analytics Inc. Data Breach Exposes Personal Information Read More »
A ransomware group has reportedly claimed responsibility for an attack on Adobe Insurance Brokers, LLC, a California insurance agency, though the company has not confirmed the incident.
Adobe Insurance Brokers, LLC Data Breach Claim: Personal Information Reportedly Exposed Read More »
Lockton Companies, LLC has notified individuals that a social engineering attack in August 2026 gave an unauthorized person access to employee accounts containing personal information.
Lockton Companies, LLC Data Breach Exposes Personal Information Read More »
A ransomware group has claimed responsibility for a data breach at The Buckner Company, alleging theft of employee Social Security numbers, passwords, payroll records, and driver license scans. The company has not publicly confirmed the incident.
National Insurance Company customers had names, Social Security numbers, insurance account numbers, and sometimes dates of birth exposed after a law firm holding their records confirmed a cybersecurity incident in September 2026.
A ransomware group has claimed responsibility for a data breach involving Aon plc, a major professional services and insurance brokerage firm. Aon has not publicly confirmed the incident.
Aon plc Data Breach Exposes Client and Corporate Data Read More »