Mountain West Insurance & Financial Services, an independent insurance and financial services agency headquartered in Colorado, suffered a significant data breach in March 2025. An unauthorized actor gained access to multiple employee email accounts, compromising sensitive consumer information. The exposed data included full names, Social Security numbers, dates of birth, driver’s license numbers, financial account details (including access information), payment card data, passport numbers, electronic signatures, medical information, and health insurance records. The breach was discovered on March 17, 2025, but the extent of the compromise was confirmed only on August 15, 2025. Affected individuals were notified in September 2025, with the company offering credit monitoring and identity protection services. The incident poses severe risks of identity theft, financial fraud, and unauthorized access to highly sensitive personal and financial data, potentially leading to long-term harm for victims.