Insurance industry data breaches expose policyholder Social Security numbers, financial information, and, for health insurers in particular, sensitive medical history and claims data alongside standard identity information. These exposures can lead to identity theft, traditional insurance fraud, and medical identity theft depending on the type of coverage and data involved, with health insurance breaches carrying especially serious privacy consequences given the sensitivity of medical claims history. Insurance companies maintain some of the largest stores of long-term personal data of any industry, since policies and claims histories are often retained for years or decades, meaning a breach can expose information about individuals who haven’t interacted with the company recently. Affected individuals may include current policyholders, former policyholders, dependents covered under a family plan, and sometimes claimants who were never customers at all. This page tracks confirmed data breaches at insurance companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.
A.G.I.A. LLC, also known as AGIA Affinity, notified customers that a cybersecurity incident at its vendor Doxa Insurance Holdings exposed Social Security numbers and driver’s license numbers.
A.G.I.A. LLC Data Breach Exposes Social Security Numbers and Driver’s License Numbers Read More »
ECBM, LP notified the Vermont Attorney General of a data breach involving government ID numbers, raising identity theft concerns for affected individuals.
ECBM, LP Data Breach Exposes Government ID Numbers Read More »
LIA Insurance Administrators, Inc. notified the Vermont Attorney General of a data breach that exposed financial account codes and credit and debit account information belonging to policyholders.
LIA Insurance Administrators Data Breach Exposes Financial Account Information Read More »
Fiesta Insurance Franchise Corporation notified the Vermont Attorney General that a data breach exposed customers’ Social Security numbers and government ID numbers.
A vendor incident affecting Knights of Columbus insurance underwriting records may have exposed sensitive personal and medical information belonging to members and applicants.
Knights of Columbus Data Breach Exposes Personal and Medical Information Read More »
Doxa E&S Solutions, a surplus lines insurance brokerage, confirmed a data breach exposing Social Security numbers and government-issued ID numbers, prompting concerns about identity theft for affected clients.
Doxa E&S Solutions Data Breach Exposes Social Security Numbers and Government IDs Read More »
Allianz Life Insurance Company of North America notified the Iowa Attorney General of a data breach that exposed customers’ personal information, including Social Security numbers.
Allianz Life Insurance Data Breach Exposes Names and Social Security Numbers Read More »
TransGlobal Insurance Agency, Inc. notified customers that a cyberattack in February 2026 exposed their names, Social Security numbers, driver’s license numbers, and dates of birth.
The Beacon Mutual Insurance Company notified individuals that unauthorized access to its network led to the theft of files containing personal information, prompting a free credit monitoring offer.
Beacon Mutual Insurance Company Data Breach Exposes Personal Information Read More »
InfoSys McCamish Systems, LLC has notified affected individuals of a data breach that exposed sensitive personal and financial information, prompting concerns over identity theft and fraud.