Santalucía discloses cybersecurity incident involving customer data

Spanish insurer Santalucía  disclosed a cybersecurity incident involving unauthorized access to customer information and said it activated its contingency plan in response.

The incident has been contained and did not result in service interruptions, data modification, or operational disruption. Santalucía added that it reinforced system monitoring and deployed additional resources to protect customer data.

The company reported the incident to Spain’s Directorate General of Insurance and Pension Funds, the Spanish Data Protection Agency, and law enforcement authorities, and said it is contacting affected customers.

Santalucía serves more than 7.4 million policyholders and reported €2.19 billion in earned premiums and a non-life combined ratio of 96.4% at the end of 2024.