Starr Insurance Data Breach: Akira Ransomware Group Exfiltrates 15GB of Sensitive Data In November 2025, Starr Insurance, Inc., a Pennsylvania-based insurance agency, suffered a data breach after an unauthorized actor accessed and copied files from its network. The ransomware group Akira later claimed responsibility for the attack in April 2026, stating it had exfiltrated 15 gigabytes of data, which was subsequently listed for download on its leak site. Despite the breach occurring in late 2025, Starr Insurance did not begin notifying affected individuals until May 6, 2026 a delay that may have violated federal or state data protection regulations. The compromised data includes highly sensitive information such as names, addresses, Social Security numbers, driver’s license numbers, financial account details, payment card information, medical records, health insurance data, and online account credentials. Legal firm Schubert Jonckheer & Kolbe LLP is currently investigating the incident, noting that impacted individuals may face risks of identity theft and privacy violations. The breach has raised concerns about Starr Insurance’s cybersecurity practices and compliance with notification requirements.