Pan-American Life Insurance Company, a major U.S. provider of life, accident, and health insurance with over one million customers across 20+ countries, suffered a data breach disclosed on October 30, 2025. The incident exposed sensitive personally identifiable information (PII) and protected health information (PHI) of at least 564 individuals in Texas, though the total number of affected consumers remains undisclosed. Compromised data includes names, dates of birth, Social Security numbers, medical information, and health insurance details. The breach poses significant risks, including identity theft, financial fraud, and unauthorized access to medical records, potentially leading to long-term harm such as fraudulent accounts, credit damage, or misuse of health data. Affected individuals are advised to enroll in credit monitoring, place fraud alerts, and seek legal recourse for compensation covering out-of-pocket expenses, time spent mitigating risks, and emotional distress. Law firms are actively investigating the incident for potential class-action lawsuits.

The California Office of the Attorney General disclosed a data breach affecting Pan-American Life Insurance Company (PALIC) on December 4, 2023, stemming from a vulnerability in third-party software (MOVEit Transfer) exploited on May 28, 2023. The breach exposed sensitive personal information, including names, addresses, Social Security numbers, and financial data of an undisclosed number of individuals. The compromised data poses significant risks, such as identity theft, financial fraud, and reputational harm to the affected parties. While the exact scale of the breach remains unconfirmed, the exposure of such critical details underscores severe operational and compliance failures. PALIC’s reliance on vulnerable third-party software highlights broader cybersecurity gaps in supply chain dependencies, amplifying the potential for large-scale data exploitation by malicious actors. The incident necessitates regulatory scrutiny, customer notifications, and remediation efforts to mitigate long-term consequences for both the company and its clients.

The California Attorney General reported a data breach involving Pan-American Life Insurance Group on March 11, 2021. The breach occurred on February 19, 2021, due to unauthorized access resulting from a phishing attempt that installed malware. Personal information, including names, addresses, and dates of birth, was compromised, affecting a small percentage of individuals with more sensitive data involved.