The Maine Office of the Attorney General disclosed on July 7, 2021, that Freedom Insurance Agency suffered a data breach stemming from a configuration error at its third-party vendor, Vertafore. The incident occurred on November 30, 2020, exposing the driver’s license numbers of 6,465 individuals. The breach was attributed to misconfigured storage settings, allowing unauthorized access to sensitive personal data. While the exposed information was limited to driver’s license numbers—without evidence of financial or broader identity theft—the incident raised concerns over third-party risk management and the protection of personally identifiable information (PII). The company likely faced reputational damage and potential regulatory scrutiny, though no immediate financial fraud or systemic operational disruption was reported. The breach underscored vulnerabilities in vendor security practices and the cascading risks posed by supply-chain cybersecurity lapses.