NewsCompaniesFlawsGuides
Get the app
HighClosedUpdated

AssuranceAmerica breach exposes insurance and identity records of nearly seven million people

Attackers copied AssuranceAmerica insurance files affecting 6,998,886 people. Information varied, including driving-licence numbers and, for some, Social Security numbers. Check your notice, review credit reports and consider credit freezes.

What to do

Read your AssuranceAmerica notice to check which information was involved and whether its free IDX monitoring offer remains available. Review credit reports and financial statements, report suspicious transactions promptly, and consider free credit freezes with Equifax, Experian and TransUnion.

What’s happening

An employee-targeted attack on AssuranceAmerica in March exposed records relating to 6,998,886 people. The company’s California notice says affected information included names alongside varying combinations of contact details, driving-licence numbers, vehicle information, insurance policies or accounts, claims records, Tax IDs and Social Security numbers. Not every person had every category exposed. June disclosures were followed by July notifications covering the larger reported total. AssuranceAmerica says it reset passwords, strengthened monitoring and provided additional staff training. Its California notice offered 12 months of IDX credit monitoring. A proposed class action was filed in September. As at 3 November, recovery of the copied files, subsequent misuse, any ransom payment and a settlement remain unconfirmed in the sources reviewed. There is no software update for affected customers to install.

What
Breach
Affects
AssuranceAmerica insurance customer and driver records
Fixed in
Nothing to patch
Since
16 Mar 2026
Closed
1 Sept 2026

Timeline

  1. Update

    Lon Sweeney filed a proposed class action in federal court in Georgia seeking damages and stronger data security. Its allegations have not been established as findings of liability.

  2. Update

    Indiana’s regulator lists this as the notification date, with 6,998,886 people affected overall, including 237,141 Indiana residents.

  3. Made public

    Breach Census records filings with California and Washington regulators disclosing the March incident.

  4. Update

    AssuranceAmerica completed its review of the affected files, according to the company notice quoted by BleepingComputer.

  5. Update

    The company detected suspicious activity and brought in external forensic specialists. It says it took affected servers offline and notified law enforcement.

  6. UpdateNothing to patch

    AssuranceAmerica says malicious activity targeting an employee led to intruders accessing its systems and copying files.

Sources

  1. Notice of Data Security Incident — California individual noticeAssuranceAmerica · 17 June 2026
  2. AssuranceAmerica data breach exposes records of 6.9 million driversBleepingComputer · 9 July 2026
  3. Another massive data breach exposed millions of driver's license numbersTechCrunch · 8 July 2026
  4. AssuranceAmerica Managing General Agency, LLCBreach Census · 17 Oct 2026
  5. October 2026 year-to-date data breach reportIndiana Attorney General
  6. Sweeney v. AssuranceAmerica Managing General Agency LLC — Lawsuit ComplaintUS District Court, Northern District of Georgia, via Docket Nexus · 1 Sept 2026
  7. Sweeney v. AssuranceAmerica Managing General Agency LLC — case recordDocket Nexus
HARD Live follows this until it’s over: each change is added to the timeline with its source. Everything live · Everything from March 2026 · JSON · RSS