Insurance

Insurance industry data breaches expose policyholder Social Security numbers, financial information, and, for health insurers in particular, sensitive medical history and claims data alongside standard identity information. These exposures can lead to identity theft, traditional insurance fraud, and medical identity theft depending on the type of coverage and data involved, with health insurance breaches carrying especially serious privacy consequences given the sensitivity of medical claims history. Insurance companies maintain some of the largest stores of long-term personal data of any industry, since policies and claims histories are often retained for years or decades, meaning a breach can expose information about individuals who haven’t interacted with the company recently. Affected individuals may include current policyholders, former policyholders, dependents covered under a family plan, and sometimes claimants who were never customers at all. This page tracks confirmed data breaches at insurance companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.

Nottingham Village Cybersecurity Incident Investigation: Data Breach Potentially Affects Thousands

Nottingham Village cybersecurity incident investigation involving potential exposure of sensitive resident information
Healthcare, Insurance /

Nottingham Village, a senior living and healthcare provider, confirmed a data breach involving unauthorized access to its systems, disclosed via an attorney general filing on May 22, 2026. Between 1,000 and 10,000 individuals may be affected, potentially including residents' personal, medical, and financial information. Specific exposed data remains undisclosed. Affected individuals should first monitor financial

Nottingham Village Cybersecurity Incident Investigation: Data Breach Potentially Affects Thousands Read More »

Hawaii Employers Mutual Insurance Company Data Breach

Hawaii Employers Mutual Insurance Company Data Breach
Insurance /

Hawaii Employers Mutual Insurance Company detected suspicious activity on its systems and, after a forensic investigation, confirmed an unauthorized party accessed files containing sensitive personal data, including full names, Social Security numbers, government-issued identification, and financial information. Individuals who were insured or otherwise had data stored with the company may be affected. Anyone receiving a

Hawaii Employers Mutual Insurance Company Data Breach Read More »

illumifin Data Breach

illumifin Data Breach
Insurance /

illumifin, an insurance technology and third-party administrator, discovered on November 4, 2025 that an unauthorized third party had accessed its network and copied sensitive data, potentially including Social Security numbers, medical records, financial details, government ID numbers, and biometric information. Customers of the more than 100 insurance carriers and 65 TPA clients illumifin serves may

illumifin Data Breach Read More »

Integrated Specialty Coverages, LLC (“ISC”) Data Breach

hacker, cyber, security, network, information, protection, privacy, black network, black security, black information, hacker, hacker, hacker, hacker, hacker
Insurance /

In February 2025, ISC detected a cybersecurity breach affecting a limited portion of its systems. Personal data—including names, SSNs, and biometric info—may have been accessed. ISC has secured its network and is offering 12 months of free credit monitoring through Cyberscout. Learn what happened, what was exposed, and how to protect your identity.

Integrated Specialty Coverages, LLC (“ISC”) Data Breach Read More »