{"id":"assuranceamerica-driver-records-breach-jun-2026","category":"breach","status":"closed","title":"AssuranceAmerica breach exposes insurance and identity records of nearly seven million people","tldr":"Attackers copied AssuranceAmerica insurance files affecting 6,998,886 people. Information varied, including driving-licence numbers and, for some, Social Security numbers. Check your notice, review credit reports and consider credit freezes.","summary":"An employee-targeted attack on AssuranceAmerica in March exposed records relating to 6,998,886 people. The company’s California notice says affected information included names alongside varying combinations of contact details, driving-licence numbers, vehicle information, insurance policies or accounts, claims records, Tax IDs and Social Security numbers. Not every person had every category exposed. June disclosures were followed by July notifications covering the larger reported total. AssuranceAmerica says it reset passwords, strengthened monitoring and provided additional staff training. Its California notice offered 12 months of IDX credit monitoring. A proposed class action was filed in September. As at 3 November, recovery of the copied files, subsequent misuse, any ransom payment and a settlement remain unconfirmed in the sources reviewed. There is no software update for affected customers to install.","action":"Read your AssuranceAmerica notice to check which information was involved and whether its free IDX monitoring offer remains available. Review credit reports and financial statements, report suspicious transactions promptly, and consider free credit freezes with Equifax, Experian and TransUnion.","product":"AssuranceAmerica insurance customer and driver records","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["assuranceamerica","insurance","data-breach","identity-theft","us"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Notice of Data Security Incident — California individual notice","url":"https://oag.ca.gov/system/files/AA%20-%20Individual%20Notice%20Letter%20-%20CA.pdf","by":"AssuranceAmerica","date":"2026-06-17"},{"kind":"news","title":"AssuranceAmerica data breach exposes records of 6.9 million drivers","url":"https://www.bleepingcomputer.com/news/security/assuranceamerica-data-breach-exposes-records-of-69-million-drivers/","by":"BleepingComputer","date":"2026-07-09"},{"kind":"news","title":"Another massive data breach exposed millions of driver's license numbers","url":"https://techcrunch.com/2026/07/08/another-massive-data-breach-exposed-millions-of-drivers-license-numbers/","by":"TechCrunch","date":"2026-07-08"},{"kind":"research","title":"AssuranceAmerica Managing General Agency, LLC","url":"https://breachcensus.com/org/assuranceamerica-managing-general-agency-llc","by":"Breach Census","date":"2026-10-17"},{"kind":"advisory","title":"October 2026 year-to-date data breach report","url":"https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdf","by":"Indiana Attorney General","date":""},{"kind":"post","title":"Sweeney v. AssuranceAmerica Managing General Agency LLC — Lawsuit Complaint","url":"https://docketnexus.com/document/492525824/","by":"US District Court, Northern District of Georgia, via Docket Nexus","date":"2026-09-01"},{"kind":"research","title":"Sweeney v. AssuranceAmerica Managing General Agency LLC — case record","url":"https://docketnexus.com/case/sweeney-v-assuranceamerica-managing-general-agency-llc-74743168/","by":"Docket Nexus","date":""}],"started":"2026-03-16","closed":"2026-09-01","created":"2026-11-03T20:41:21.778Z","updated":"2026-11-03T20:41:21.778Z","cve_notes":[],"timeline":[{"at":"2026-09-01","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Lon Sweeney filed a proposed class action in federal court in Georgia seeking damages and stronger data security. Its allegations have not been established as findings of liability.","url":"https://docketnexus.com/document/492525824/","by":"Docket Nexus","patch":null},{"at":"2026-07-10","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Indiana’s regulator lists this as the notification date, with 6,998,886 people affected overall, including 237,141 Indiana residents.","url":"https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdf","by":"Indiana Attorney General","patch":null},{"at":"2026-06-17","added":"2026-11-03T20:32:12.437Z","kind":"disclosed","text":"Breach Census records filings with California and Washington regulators disclosing the March incident.","url":"https://breachcensus.com/org/assuranceamerica-managing-general-agency-llc","by":"Breach Census","patch":null},{"at":"2026-06-15","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"AssuranceAmerica completed its review of the affected files, according to the company notice quoted by BleepingComputer.","url":"https://www.bleepingcomputer.com/news/security/assuranceamerica-data-breach-exposes-records-of-69-million-drivers/","by":"BleepingComputer","patch":null},{"at":"2026-03-17","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"The company detected suspicious activity and brought in external forensic specialists. It says it took affected servers offline and notified law enforcement.","url":"https://oag.ca.gov/system/files/AA%20-%20Individual%20Notice%20Letter%20-%20CA.pdf","by":"AssuranceAmerica","patch":null},{"at":"2026-03-16","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"AssuranceAmerica says malicious activity targeting an employee led to intruders accessing its systems and copying files.","url":"https://oag.ca.gov/system/files/AA%20-%20Individual%20Notice%20Letter%20-%20CA.pdf","by":"AssuranceAmerica","patch":"na"}],"url":"https://hard.fyi/live/assuranceamerica-driver-records-breach-jun-2026/","json":"https://hard.fyi/api/live?id=assuranceamerica-driver-records-breach-jun-2026"}