Indico Data discloses security incident

Indico Data  disclosed a cybersecurity incident that may have exposed personal information belonging to customers’ employees or policyholders.

The insurance automation provider determined on May 7, 2026, that an unauthorized party may have accessed online repositories containing corporate customer information. Potentially affected data includes names, addresses and Social Security numbers.

Indico notified affected corporate customers and is reviewing the compromised data to identify impacted individuals. The company has begun mailing notices and is offering free credit monitoring and identity-restoration services through TransUnion.

Following the incident, Indico rotated access credentials, added monitoring tools and tightened access controls.

Boston-based Indico provides AI-powered automation technology for insurance underwriting, claims, midterm adjustments and broker reconciliation. The company has raised approximately $49 million from investors including Guidewire, Nationwide Ventures, Aviva Ventures and .406 Ventures.