Loading story…
AssuranceAmerica Managing General Agency disclosed a cyber intrusion that exposed the personal and insurance-related data of up to 6,998,886 individuals after an unauthorized third party compromised an employee account and accessed parts of the company’s internal network. The company said the malicious activity occurred on March 16, 2026, was detected on March 17, and resulted in copied data files containing names, contact details, automobile insurance policy and account information, driver and vehicle information, and claims records. For some affected people, the exposed data may also include driver’s license numbers, Social Security numbers, and Tax ID numbers.
AssuranceAmerica said it completed its forensic review on June 15 and began notifying affected individuals in July, after initially reporting a smaller impact before later filings raised the total to nearly 7 million. In response, the insurer took affected servers offline, isolated impacted systems, disabled compromised credentials, reset passwords, expanded monitoring and threat detection, increased employee cybersecurity training, notified law enforcement, and offered two years of identity protection and credit monitoring through IDX. The company also warned customers to watch for phishing attempts and identity-related fraud.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
The company began notifying affected individuals in July 2026 and offered two years of identity protection and credit monitoring through IDX. Later reporting indicated the breach may affect as many as 6,998,886 people, up from an initial figure of 1,124,824.
AssuranceAmerica completed its forensic review of the incident on June 15, 2026. The review informed the scope of exposed data and the company’s breach response.
The company detected the intrusion on March 17, 2026, one day after the suspected compromise. It responded by taking containment steps including disabling compromised credentials, isolating affected systems, resetting passwords, enhancing monitoring, and notifying law enforcement.
AssuranceAmerica said an unauthorized third party targeted an employee account and accessed portions of its IT environment, copying files containing sensitive personal and insurance-related information. The company believes the malicious activity occurred on March 16, 2026.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AssuranceAmerica disclosed a data breach affecting **6.99 million people**, exposing names, contact details, **driver’s license numbers**, and other insurance-related information tied to auto insurance policies, accounts, drivers, vehicles, and customer claims. The company said it discovered attackers in its systems on March 17 and completed its investigation on June 15, concluding that customer data had been stolen in what appears to be the largest known reported exposure of Americans’ driver’s license information this year. The insurer said the intrusion involved a targeted employee account and that the compromised credentials were later disabled, but it did not disclose the exact intrusion method or whether extortion or ransom demands were involved. Filings with the Indiana and Maine attorney general offices corroborated the scale of the breach, and customer notification letters are expected to begin on July 10.
Jul 10, 2026
Aflac, the largest U.S. supplemental health insurance provider, has notified 22.65 million individuals that their sensitive health and personal information, including Social Security numbers, may have been compromised in a major data breach that occurred in June 2025. The incident, which Aflac described as part of a "sophisticated cybercrime campaign" targeting the insurance industry, is expected to be the largest health data breach reported to U.S. federal regulators in 2025 once official numbers are updated on the Department of Health and Human Services' HIPAA Breach Reporting Tool. Security researchers have speculated that the cybercriminal group Scattered Spider may be responsible for the attack, which coincided with similar incidents affecting other large U.S. insurers. Aflac initially reported the breach to the HHS Office for Civil Rights with a placeholder estimate of 500 affected individuals, but the updated figure of 22.65 million significantly increases the scale and impact of the incident. The breach highlights ongoing threats to the insurance sector and the potential for large-scale exposure of sensitive health data.
Jun 29, 2026
Several major organizations in the healthcare and insurance sectors have disclosed significant data breaches affecting millions of individuals. ARC Community Services reported a ransomware attack by the INC Ransom group, resulting in the exfiltration of sensitive patient data, including health and financial information. Aflac confirmed that a June cyberattack led to the theft of files containing insurance claims, health data, and Social Security numbers for over 22 million customers, with no operational disruption but widespread exposure of personal information. The Louisiana Office of Student Financial Assistance (LOSFA) notified students of unauthorized access to its systems, exposing names and Social Security numbers, though certain savings accounts were not affected. Oklahoma Spine Hospital agreed to a $1.1 million settlement following a July breach that compromised the data of nearly 39,000 patients, including medical and financial details. These incidents highlight the ongoing threat posed by cybercriminals targeting sensitive data in the healthcare and insurance industries. Victims in these breaches are being offered credit monitoring and identity protection services, and regulatory notifications have been issued. The attacks have prompted legal action, regulatory scrutiny, and, in some cases, leadership changes within affected organizations. Law enforcement and cybersecurity experts have been engaged to investigate and mitigate the impact of these breaches, which are part of a broader trend of targeted attacks against organizations handling large volumes of personal and health-related information.
Jun 29, 2026