Insurance industry data breaches expose policyholder Social Security numbers, financial information, and, for health insurers in particular, sensitive medical history and claims data alongside standard identity information. These exposures can lead to identity theft, traditional insurance fraud, and medical identity theft depending on the type of coverage and data involved, with health insurance breaches carrying especially serious privacy consequences given the sensitivity of medical claims history. Insurance companies maintain some of the largest stores of long-term personal data of any industry, since policies and claims histories are often retained for years or decades, meaning a breach can expose information about individuals who haven’t interacted with the company recently. Affected individuals may include current policyholders, former policyholders, dependents covered under a family plan, and sometimes claimants who were never customers at all. This page tracks confirmed data breaches at insurance companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.
Markel Insurance has disclosed a data breach that exposed Social Security numbers, driver’s license numbers, and medical information belonging to affected individuals, triggering notification letters and a Texas regulatory filing.
Markel Insurance Data Breach Exposes Social Security Numbers and Medical Information Read More »
ECBM LP, a Pennsylvania insurance brokerage, disclosed that a 2024 data breach exposed the Social Security numbers and driver’s license numbers of roughly 8,112 people nationwide.
ECBM LP Data Breach Exposes Social Security Numbers and Driver’s License Numbers Read More »
Miller Insurance detected suspicious activity within its systems and, after a forensic investigation, confirmed that unauthorized access may have exposed customers' full names, Social Security numbers, government-issued ID details, financial information, and insurance-related data. Anyone who received a notification letter is affected. Affected individuals should immediately review the notice and enroll in any offered identity
Nottingham Village, a senior living and healthcare provider, confirmed a data breach involving unauthorized access to its systems, disclosed via an attorney general filing on May 22, 2026. Between 1,000 and 10,000 individuals may be affected, potentially including residents' personal, medical, and financial information. Specific exposed data remains undisclosed. Affected individuals should first monitor financial
Hawaii Employers Mutual Insurance Company detected suspicious activity on its systems and, after a forensic investigation, confirmed an unauthorized party accessed files containing sensitive personal data, including full names, Social Security numbers, government-issued identification, and financial information. Individuals who were insured or otherwise had data stored with the company may be affected. Anyone receiving a
Hawaii Employers Mutual Insurance Company Data Breach Read More »
illumifin, an insurance technology and third-party administrator, discovered on November 4, 2025 that an unauthorized third party had accessed its network and copied sensitive data, potentially including Social Security numbers, medical records, financial details, government ID numbers, and biometric information. Customers of the more than 100 insurance carriers and 65 TPA clients illumifin serves may
In February 2025, ISC detected a cybersecurity breach affecting a limited portion of its systems. Personal data—including names, SSNs, and biometric info—may have been accessed. ISC has secured its network and is offering 12 months of free credit monitoring through Cyberscout. Learn what happened, what was exposed, and how to protect your identity.
Integrated Specialty Coverages, LLC (“ISC”) Data Breach Read More »