Insurance industry data breaches expose policyholder Social Security numbers, financial information, and, for health insurers in particular, sensitive medical history and claims data alongside standard identity information. These exposures can lead to identity theft, traditional insurance fraud, and medical identity theft depending on the type of coverage and data involved, with health insurance breaches carrying especially serious privacy consequences given the sensitivity of medical claims history. Insurance companies maintain some of the largest stores of long-term personal data of any industry, since policies and claims histories are often retained for years or decades, meaning a breach can expose information about individuals who haven’t interacted with the company recently. Affected individuals may include current policyholders, former policyholders, dependents covered under a family plan, and sometimes claimants who were never customers at all. This page tracks confirmed data breaches at insurance companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.
Pivot Health disclosed a data breach that exposed the personal and health insurance information of 8,391 individuals after an unauthorized actor accessed its AWS cloud environment.
Pivot Health Data Breach Exposes Health Insurance and Financial Information Read More »
A ransomware attack on Managed Care Advisors/Sedgwick Government Solutions exposed Social Security numbers, medical records, and other sensitive data, including files tied to the World Trade Center Health Program.
Sedgwick Data Breach Exposes Social Security Numbers and Medical Records Read More »
STRATeBEN, a Maryland-based employee benefits consulting firm, disclosed that a phishing attack exposed the names, Social Security numbers and dates of birth of health plan members nationwide.
STRATeBEN Data Breach Exposes Social Security Numbers and Dates of Birth Read More »
Kemper Corporation confirmed a data breach after the ShinyHunters extortion group published customer records taken from its Salesforce environment, exposing names, contact information and partial payment card data.
Kemper Data Breach Exposes Names, Contact Details and Partial Payment Card Data Read More »
Paylogix, a New York insurtech company, disclosed that hackers accessed its network in November 2025 and stole files containing Social Security numbers, financial records, and other sensitive personal data.
Paylogix Data Breach Exposes Social Security Numbers and Financial Information Read More »
A Risk Strategies employee email account was hacked in January 2026, exposing the names, Social Security numbers, and medical records of over 15,000 people nationwide.
Risk Strategies Data Breach Exposes Social Security Numbers and Medical Records Read More »
Tower Administrative Services, a Pennsylvania insurance administrator, disclosed a data breach affecting 248,940 individuals after hackers accessed names, Social Security numbers, addresses and financial account information stored on its network.
Markel Insurance has disclosed a data breach that exposed Social Security numbers, driver’s license numbers, and medical information belonging to affected individuals, triggering notification letters and a Texas regulatory filing.
Markel Insurance Data Breach Exposes Social Security Numbers and Medical Information Read More »
ECBM LP, a Pennsylvania insurance brokerage, disclosed that a 2024 data breach exposed the Social Security numbers and driver’s license numbers of roughly 8,112 people nationwide.
ECBM LP Data Breach Exposes Social Security Numbers and Driver’s License Numbers Read More »
Miller Insurance detected suspicious activity within its systems and, after a forensic investigation, confirmed that unauthorized access may have exposed customers' full names, Social Security numbers, government-issued ID details, financial information, and insurance-related data. Anyone who received a notification letter is affected. Affected individuals should immediately review the notice and enroll in any offered identity