American Income Life (AIL), an insurance company, suffered a cyberattack resulting in the theft and public release of sensitive data belonging to approximately 150,000 individuals. The exposed information includes unique record IDs, full names, phone numbers, addresses, email addresses, dates of birth, gender, and insurance-related details such as policy status and plan names. The threat actor posted the stolen data for free on a hacking forum, increasing the risk of widespread identity theft, targeted phishing, and insurance fraud. Cybersecurity researchers confirmed the data’s authenticity, though its recency remains unverified. The free distribution of the dataset amplifies potential follow-up attacks, as criminals could exploit the PII for fraudulent accounts, unauthorized transactions, or medical/insurance fraud. The breach also raises concerns about automated exploitation if the structured data is combined with other leaked datasets.