AssuranceAmerica auto insurance data breach hits nearly 7M people

AssuranceAmerica, an auto insurance provider that operates through a network of independent agents, has disclosed a data breach affecting nearly 7 million people. The information exposed included driver’s license numbers and other personal information tied to auto insurance customers.

The company said it detected suspicious activity on March 17, 2026, after one of its employees was targeted by malicious activity the day before. Investigators later found that an unauthorized third party had accessed portions of AssuranceAmerica’s IT environment and copied certain data files.

The incident affected 6,998,886 people, according to the Indiana Attorney General’s violation list. The California Attorney General’s Office’s statement also states that AssuranceAmerica began notifying affected individuals after completing its file review on June 15, 2026.

AssuranceAmerica sells auto, renters and commercial auto insurance through independent agents. So even if the company name doesn’t sound familiar, your information could still be involved if your policy, quote, claim or driver details pass through their systems.

CUSTOMER INFORMATION IS DISCLOSED DUE TO ADT DATA BREACH

Free live CyberGuy lesson: Tired of spam? Join us on July 22

Join us Wednesday, July 22, 13:00 ET For a free CyberGuy Live course to help you reduce robocalls, spam, spam, and other unwanted messages. Kurt “CyberGuy” Knutsson will walk you through simple ways to filter spam, clean your inbox, and recognize messages that could put your personal information at risk. No technical experience is required. You will also receive our anti-spam checklist, and each registrant will then receive a link to the class registration.

Book your free place today CyberGuyLive.com.

What happened in the AssuranceAmerica data breach?

AssuranceAmerica said the breach began with malicious activity targeting an employee. The company did not explain exactly how the employee was targeted. But it later said it disabled compromised credentials and unauthorized logins.

This detail should attract your attention. Most breaches start with a stolen login, a convincing message, or an infected device. Once inside, attackers can move quickly and look for files worth stealing.

In this case, AssuranceAmerica said that an unauthorized third party copied certain data files from the IT environment. The company then reviewed these files to identify affected individuals.

What information was exposed in the AssuranceAmerica breach?

AssuranceAmerica said the stolen files contained names as well as one or more other types of personal information. This information may include contact information, auto insurance policy or account information, driver or vehicle information, claims-related information, and driver’s license numbers. The California notice also notes that some files may contain Tax ID information and/or Social Security numbers.

This mix can create real risk. A scammer who tells you your name, license number and insurance information may sound much more convincing. They may pretend to be from your insurer, a repair shop, claims department, or a government agency. This follows other identity document violations including: Data breach affecting 3 million license customers in Texas. When driver’s license numbers are leaked, the risk can last much longer than with a stolen credit card number.

How did AssuranceAmerica react to the breach?

AssuranceAmerica said it took the affected server devices offline and hired external forensic experts to investigate. The company said it also reset passwords, deployed advanced monitoring and threat detection tools, and gave employees more cybersecurity instruction. Law enforcement was also notified.

AssuranceAmerica is offering affected individuals free credit monitoring for 12 months. This can help detect some suspicious activity. But you still need to monitor your insurance account, financial accounts, and mail.

Why does the AssuranceAmerica breach put drivers at risk?

The driver’s license number can help the fraudster carry out a more believable scam. Insurance information can make this scam feel personal.

For example, the caller might mention your policy, your vehicle, or a claim. They may then ask you to “verify” more information. This is where the damage can grow.

Additionally, stolen breach data can be matched against public records and data broker profiles. This can give criminals a more comprehensive picture of your life. We’ve seen the same pattern with scams linked to travel accounts, phone accounts, and other breaches, including Booking.com. Breach that exposed traveler data to fraud.

LOCK ANOTHER SMART TV, TABLET OR PHONE BEFORE CONNECTING IT

State officials say the breach involved records for Medicaid, the Medicare Savings Program and rehabilitation services spanning several years. (Photo: Silas Stein/Image alliance, via Getty Images)

Ways to stay safe after AssuranceAmerica data breach

If you receive a notification or think your information may have been compromised, take these steps immediately to make stolen data more difficult to use.

1) Read the infringement notice carefully

If you receive a notification from AssuranceAmerica, read it carefully. Check what information the company says may have been exposed in your case. Do not assume that the same data of every affected person was stolen. Some people’s driver’s license numbers may have been revealed. Others may also have Tax ID information or Social Security numbers available.

2) Use the credit monitoring offer safely

AssuranceAmerica announced that it is offering 12 months of free credit monitoring. Use the instructions in the official notification. Be wary of emails or text messages claiming to offer registration links. Scammers often copy actual violation language to trick you.

3) Freeze your credit

A. credit freeze It makes it difficult for someone to open a new account in your name. You need to place the freezer separately with Equifax, Experian and TransUnion. It’s free and you can remove it when you need to apply for a loan.

4) Add fraud alert

A fraud alert notifies lenders that they must take additional steps before extending credit in your name. You can raise a fraud alert with a credit bureau and that bureau must notify others. This adds another layer of protection in case your personal information is compromised.

5) Monitor your insurance account

Log in to your insurance account and check for any changes you don’t recognize. Look for unusual claims, new contact information, or strange policy updates. If something seems off, call the company using a number on your policy documents.

6) Protect your devices from malware

Credential theft usually starts with malware, a bad connection, or a fake download. Strong antivirus software can help block malicious files and phishing links before they cause damage. Get my picks for the 2026 winners for the best antivirus protection for your Windows, Mac, Android, and iOS devices at: cyberguy.com

CARNIVAL BREACH COULD PUT YOUR TRAVEL DATA AT RISK

Strong passwords protect your accounts, but they don’t stop data brokers from harvesting public records and selling personal information to people search sites. (Photographer: Chris Ratcliffe/Bloomberg via Getty Images)

7) Clear your online personal data

Breached data becomes more useful when fraudsters can match it to your address, relatives, phone number or public records. A data removal service can help reduce the images that data brokers view of you. This won’t eliminate the violation, but it may make you a more difficult target. Check out my top picks for data removal services and get a free scan to see if your personal information is already on the internet by visiting: CyberGuy.com.

8) Be suspicious of insurance-related calls

If someone calls about your policy, claim, or payment, slow down. Do not share verification codes. Do not confirm sensitive details during an unexpected call. Instead, hang up and call the company again via an official number.

9) Check your DMV options

If your driver’s license number has been compromised, review your state DMV’s fraud guide. Some states may offer replacement options or identity theft guidance. Rules may vary, so check with your government agency directly.

10) Use a password manager

Create strong, unique passwords for your insurance account, email and financial apps. A password manager can also help you detect fake login pages. If autofill does not occur, you may be on a fraudulent site. Check out the best expert-reviewed password managers of 2026 at: CyberGuy.com.

11) Turn on two-factor authentication

Turn on two-factor authentication (2FA) for your insurance account, email and financial accounts where possible. Use an authentication app whenever possible. Text codes are better than nothing, but scammers often target them.

Kurt’s important takeaways

The AssuranceAmerica data breach is a reminder that your driver’s license number has become a high-value target. You may not be able to control how each company stores your information. But you can make it harder to use stolen data. Start with your credit. Then check your insurance account and watch for crooks who know enough to look convincing. Also clean up any personal data currently floating around online. The bigger issue is trust. Companies want sensitive information because they need it to do business. When that information leaks, you’re the one checking statements, freezing credit, and worrying about what happens next.

What should a company owe you if it loses your identification number that you use to prove who you are? Let us know by writing to us. CyberGuy.com.

CLICK TO DOWNLOAD FOX NEWS APPLICATION

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent safety alerts and special deals straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit: CyberGuy.com – Trusted by millions of people who watch CyberGuy on TV every day.
• Plus, when you join you’ll get instant access to my Ultimate Scam Survival Guide for free.

Copyright 2026 CyberGuy.com. All rights reserved.