California Casualty Indemnity Exchange, an insurance provider serving educators, law enforcement, firefighters, and nurses, suffered a data breach discovered on November 5, 2025. An unauthorized individual accessed its IT network between September 2–8, 2025, copying files containing sensitive personally identifiable information (PII)—including names, Social Security numbers, dates of birth, driver’s license/state ID numbers, tax IDs, and financial account details. The breach exposed at least five individuals (two in Maine, three in Massachusetts) to risks of identity theft and financial fraud. The company isolated affected systems, engaged a third-party cybersecurity firm, and notified law enforcement. In response, it offered 24-month complimentary Experian IdentityWorks memberships (credit monitoring, identity theft detection, and restoration) to affected policyholders, alongside a dedicated call center for breach-related inquiries. Regulatory filings confirm the incident involved unauthorized data exfiltration of customer PII, though no ransomware was reported. Affected individuals were advised to monitor accounts, obtain credit reports, and consider fraud alerts or security freezes.

California Casualty, an insurance provider, has reportedly suffered a data breach exposing sensitive customer information. The incident is under investigation by attorneys exploring the feasibility of a class action lawsuit, suggesting the breach may have compromised personal or financial data of affected individuals. While the exact scope of the leaked data (e.g., Social Security numbers, policy details, or financial records) is not specified in the article, the legal pursuit implies significant exposure—potentially enabling identity theft, fraud, or financial harm. The breach has prompted calls for impacted individuals to come forward, indicating the company may have failed to adequately secure customer data or notify victims in a timely manner. The focus on legal recourse underscores the severity of the incident, as data breaches in the insurance sector often involve highly sensitive information tied to individuals’ livelihoods and financial security.