AssuranceAmerica discloses breach affecting nearly 7 million people
Summary
AssuranceAmerica disclosed that attackers accessed its systems in March 2026 and copied files containing personal and insurance information belonging to 6,998,886 people. The company disabled compromised credentials, isolated affected systems and notified law enforcers.
Key points
- AssuranceAmerica reported that an unauthorized third party accessed parts of its IT environment and copied data files.
- The company said the activity began on March 16, 2026, after an employee was targeted; it detected suspicious activity the next day.
- The breach affected 6,998,886 people, according to a filing with Maine’s Office of the Attorney General.
- Exposed information included names, contact details, insurance account or policy information, vehicle and claims data, and driver’s license numbers.
- The company disabled compromised credentials and unauthorized sessions, isolated affected systems, and notified law enforcement.
- AssuranceAmerica said it reset passwords, added monitoring and threat detection, and advised affected people to monitor credit reports and financial accounts.
Article Details
- Victim Organization
- AssuranceAmerica
- Incident Type
- Data breach involving unauthorized access to company systems and copying of data files
- Incident Date
- 2026-03-16
- Data Types Exposed
- Names
- Contact information
- Automobile insurance policy or account information
- Driver or vehicle information
- Claims-related information
- Driver's license numbers
- Affected Records
- 6,998,886 people
- Operational Impact
- AssuranceAmerica disabled compromised credentials and unauthorized sessions, isolated affected systems, and notified law enforcement. It also reset passwords, enhanced monitoring and threat detection, and provided additional cybersecurity instruction to personnel.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed