AssuranceAmerica Confirms Massive Data Breach Affecting 6.9 Million Americans U.S. insurance provider AssuranceAmerica has disclosed a data breach impacting 6.9 million people, marking the largest known exposure of Americans’ driver’s license information this year. The company, which offers car and rental insurance across over a dozen states, confirmed that hackers accessed sensitive customer data, including names, contact details, and driver’s license numbers information that could be exploited for fraud and impersonation. The breach was detected on March 17, with the investigation concluding on June 15. In addition to personal data, the attackers stole auto insurance policy details, vehicle and driver information, and customer claim records. While AssuranceAmerica did not specify all compromised data types, it revealed that the hackers targeted an employee, later disabling the compromised credentials. The method of credential theft remains unclear, though similar incidents have involved password-stealing malware or vulnerable software. AssuranceAmerica did not respond to inquiries about whether it engaged with the hackers or paid a ransom. The breach was officially listed with the Indiana attorney general’s office, with notification letters set to be sent to affected individuals on July 10. A separate filing with the Maine attorney general’s office confirmed the same figure of 6.99 million impacted people, though Maine’s breach portal is currently offline following a fraudulent disclosure last month. This incident follows a string of recent breaches exposing driver’s licenses and identity documents, including a June breach of Texas state systems that compromised 3 million driver’s license and passport numbers. Other high-profile leaks have involved hotel check-in systems, money transfer apps, and government services, highlighting growing risks as more platforms require identity verification under new age-restriction laws.

AssuranceAmerica Data Breach Exposes Personal Information of Over 600,000 South Carolina Residents AssuranceAmerica Managing General Agency, LLC, an Atlanta-based firm specializing in non-standard auto insurance for higher-risk drivers, reported a data breach affecting 611,046 South Carolina residents. The incident was disclosed to the California and Nebraska Attorneys General on June 17, 2026, though the breach was discovered months earlier, on March 17, 2026. Notification letters to impacted individuals began rolling out in June 2026. The breach originated on March 16, 2026, when a targeted cyberattack compromised an employee’s account. The following day, AssuranceAmerica detected suspicious activity in its IT systems, confirming that an unauthorized third party had accessed and exfiltrated data files during the March 16–17 window. A subsequent review revealed that the exposed files contained sensitive personal information, including: - Names and contact details - Auto insurance policy or account information - Driver/vehicle details and claims-related data - Driver’s license numbers, Tax ID information, and Social Security numbers In response, AssuranceAmerica is providing 12 months of complimentary credit monitoring and identity protection services through IDX, with enrollment details included in notification letters. Affected individuals can also contact the company’s dedicated response line or submit inquiries by mail. The breach underscores the ongoing risks of targeted cyberattacks on insurance providers, particularly those handling high-risk policyholder data.