The Washington State Office of the Attorney General disclosed a data breach affecting Insurance Technologies Corporation (ITC) on April 29, 2021, stemming from an incident on February 27, 2021. Unauthorized actors gained access to the AgencyMatrix application, a platform used by ITC, compromising the personal information of 3,925 Washington residents. The exposed data included highly sensitive details such as names, Social Security numbers (SSNs), and driver’s license numbers—information frequently exploited in identity theft, financial fraud, and phishing schemes.The breach posed significant risks to the affected individuals, as SSNs and driver’s license numbers are critical identifiers for financial and governmental transactions. While the exact method of unauthorized access was not detailed, the exposure of such data typically results in long-term vulnerabilities for victims, including potential credit damage, unauthorized account openings, and targeted scams. ITC, as the custodian of this data, faced reputational harm and potential regulatory scrutiny under data protection laws, particularly given the scale and sensitivity of the compromised records. The incident underscored vulnerabilities in third-party application security, raising concerns about the adequacy of access controls and monitoring within ITC’s digital infrastructure.