AssuranceAmerica discloses data breach

AssuranceAmerica is notifying individuals whose personal information may have been compromised in a March cyberattack.

The auto insurer detected suspicious activity on March 17 after an attacker targeted an employee and gained access to parts of its IT environment. The unauthorized party copied certain files, according to a notice published by the company.

The affected information varies by individual and may include names, contact details, auto insurance policy or account information, driver and vehicle data, claims information and driver’s license numbers. Tax identification numbers or Social Security numbers were exposed for a limited number of people.

AssuranceAmerica completed its review of the affected files on June 15. The company did not disclose how many individuals were affected.

Following the incident, AssuranceAmerica disabled compromised credentials, terminated unauthorized sessions, isolated affected systems and notified law enforcement. It also reset passwords and introduced additional monitoring and threat-detection measures.

Affected residents of California and Pennsylvania are being offered 12 months of complimentary credit monitoring through IDX. Enrollment closes October 10, 2026.