{"id":"prosura-customer-data-breach-jan-2026","category":"breach","status":"closed","title":"Prosura insurance breach exposed customer data as alleged attacker emailed policyholders","tldr":"Prosura and Hiccup rental-car insurance customers may have had contact, travel, policy and claims data exposed, including licence images. Some received attacker emails. Ignore unexpected policy messages and contact Prosura through its official website.","summary":"Prosura, which also trades as Hiccup and provides rental-car excess insurance in Australia and New Zealand, detected unauthorised access on 3 January 2026. Its statements quoted in January reports said potentially compromised information included names, email addresses, phone numbers, country of residence, travel destinations, invoices, pricing and policy dates. Claims records could also include drivers’ licences and related images. Prosura said it did not store credit card details and had no indication payment information was accessed. The alleged attacker emailed customers and threatened disclosure; later reporting described data offered for sale, with unconfirmed estimates of 300,000 to 500,000 people. Online purchases and self-service functions were temporarily suspended, while existing cover remained valid. As of 3 November, the reviewed sources provide no confirmed final customer count, completion of individual notifications, recovery or deletion of stolen data, or charges. Prosura’s original incident page could not be retrieved, limiting direct verification of its latest position.","action":"If you used Prosura or Hiccup, including through VroomVroomVroom, ignore unexpected policy extensions and messages asking you to contact a third-party address; do not open their links or attachments. Contact Prosura through its official website to ask whether your information, especially any licence documents supplied with a claim, was affected. There is no software update for customers to install.","product":"Prosura and Hiccup rental-car excess insurance","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["prosura","hiccup","insurance","data-breach","australia","new-zealand","extortion"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"Insurer Prosura hit by cyber data breach, customers contacted by 'threat actor'","url":"https://www.abc.net.au/news/2026-01-07/car-excess-insurer-prosura-hit-by-cyber-breach-customer-data/106204198","by":"ABC News","date":"2026-01-07"},{"kind":"news","title":"Rental car insurer Prosura confirms cyber incident as alleged threat actor contacts victims","url":"https://www.cyberdaily.au/security/13055-rental-car-insurer-prosura-confirms-cyber-incident-as-alleged-threat-actor-contacts-victims","by":"Cyber Daily","date":"2026-01-07"},{"kind":"news","title":"Prosura cyber incident triggers shutdown of key online services","url":"https://www.insurancebusinessmag.com/au/news/cyber/prosura-cyber-incident-triggers-shutdown-of-key-online-services-561229.aspx","by":"Insurance Business","date":"2026-01-07"},{"kind":"news","title":"Australian Insurer Prosura Confirms Cyber Incident, Takes Online Services Offline Amid Investigation","url":"https://thecyberexpress.com/prosura-cyberattack-explained/","by":"The Cyber Express","date":"2026-01-08"},{"kind":"news","title":"AI Autopsy: A Data Breach Down Under at Insurer Prosura","url":"https://assured.co.uk/2026/ai-autopsy-a-data-breach-down-under-at-insurer-prosura/","by":"Assured","date":"2026-01-22"}],"started":"2026-01-03","closed":"2026-01-22","created":"2026-11-03T20:44:13.808Z","updated":"2026-11-03T20:44:13.808Z","cve_notes":[],"timeline":[{"at":"2026-01-22","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Assured reported that the alleged attacker was advertising data claimed to concern 500,000 people; another estimate was about 300,000. Neither figure was confirmed by Prosura, and Assured described the self-service portal interruption as lasting close to two weeks.","url":"https://assured.co.uk/2026/ai-autopsy-a-data-breach-down-under-at-insurer-prosura/","by":"Assured","patch":null},{"at":"2026-01-08","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"The Cyber Express reported that Prosura had notified the Australian Cyber Security Centre and the Office of the Australian Information Commissioner. Prosura said it would contact affected people directly once it confirmed which information was involved.","url":"https://thecyberexpress.com/prosura-cyberattack-explained/","by":"The Cyber Express","patch":null},{"at":"2026-01-07","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"ABC reported that the alleged attacker threatened to release customer data unless Prosura reached an agreement. Prosura said potentially compromised records included contact, travel, policy and claims information, but did not disclose an affected-customer count.","url":"https://www.abc.net.au/news/2026-01-07/car-excess-insurer-prosura-hit-by-cyber-breach-customer-data/106204198","by":"ABC News","patch":null},{"at":"2026-01-04","added":"2026-11-03T20:32:12.437Z","kind":"disclosed","text":"Managing director Mike Boyd confirmed the incident, according to Insurance Business. Prosura suspended online policy purchases, claims functions and policy administration while investigating; existing insurance cover remained valid.","url":"https://www.insurancebusinessmag.com/au/news/cyber/prosura-cyber-incident-triggers-shutdown-of-key-online-services-561229.aspx","by":"Insurance Business","patch":null},{"at":"2026-01-03","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Prosura detected unauthorised access to its systems. Customers also received emails from someone claiming responsibility, who alleged the intrusion began on 1 January; that start date was not confirmed by Prosura.","url":"https://www.abc.net.au/news/2026-01-07/car-excess-insurer-prosura-hit-by-cyber-breach-customer-data/106204198","by":"ABC News","patch":"na"}],"url":"https://hard.fyi/live/prosura-customer-data-breach-jan-2026/","json":"https://hard.fyi/api/live?id=prosura-customer-data-breach-jan-2026"}