AssuranceAmerica Data Breach Exposes Personal Information of Over 600,000 South Carolina Residents
AssuranceAmerica Managing General Agency, LLC, an Atlanta-based firm specializing in non-standard auto insurance for higher-risk drivers, reported a data breach affecting 611,046 South Carolina residents. The incident was disclosed to the California and Nebraska Attorneys General on June 17, 2026, though the breach was discovered months earlier, on March 17, 2026. Notification letters to impacted individuals began rolling out in June 2026.
The breach originated on March 16, 2026, when a targeted cyberattack compromised an employee’s account. The following day, AssuranceAmerica detected suspicious activity in its IT systems, confirming that an unauthorized third party had accessed and exfiltrated data files during the March 16–17 window. A subsequent review revealed that the exposed files contained sensitive personal information, including:
- Names and contact details
- Auto insurance policy or account information
- Driver/vehicle details and claims-related data
- Driver’s license numbers, Tax ID information, and Social Security numbers
In response, AssuranceAmerica is providing 12 months of complimentary credit monitoring and identity protection services through IDX, with enrollment details included in notification letters. Affected individuals can also contact the company’s dedicated response line or submit inquiries by mail.
The breach underscores the ongoing risks of targeted cyberattacks on insurance providers, particularly those handling high-risk policyholder data.
Source: https://www.claimdepot.com/data-breach/assuranceamerica-2026
AssuranceAmerica cybersecurity rating report: https://www.rankiteo.com/company/assuranceamerica
"id": "ASS1782139117",
"linkid": "assuranceamerica",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '611,046',
'industry': 'Insurance',
'location': 'Atlanta, Georgia, USA',
'name': 'AssuranceAmerica Managing General Agency, LLC',
'type': 'Insurance Provider'}],
'attack_vector': 'Compromised Employee Account',
'customer_advisories': 'Notification letters sent to affected individuals in '
'June 2026 with details on credit monitoring and '
'identity protection services.',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '611,046',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Contact details',
'Auto insurance policy/account '
'information',
'Driver/vehicle details',
'Claims-related data',
'Driver’s license numbers',
'Tax ID information',
'Social Security numbers']},
'date_detected': '2026-03-17',
'date_publicly_disclosed': '2026-06-17',
'description': 'AssuranceAmerica Managing General Agency, LLC, an '
'Atlanta-based firm specializing in non-standard auto '
'insurance for higher-risk drivers, reported a data breach '
'affecting 611,046 South Carolina residents. The breach '
'originated from a targeted cyberattack compromising an '
'employee’s account, leading to unauthorized access and '
'exfiltration of sensitive personal information.',
'impact': {'data_compromised': 'Sensitive personal information, including '
'names, contact details, auto insurance '
'policy/account information, driver/vehicle '
'details, claims-related data, driver’s '
'license numbers, Tax ID information, and '
'Social Security numbers',
'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Compromised employee account'},
'investigation_status': 'Ongoing',
'references': [{'source': 'California Attorney General'},
{'source': 'Nebraska Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Attorney '
'General',
'Nebraska Attorney '
'General']},
'response': {'communication_strategy': 'Notification letters to affected '
'individuals, dedicated response line, '
'and mail inquiries',
'third_party_assistance': 'IDX (credit monitoring and identity '
'protection services)'},
'threat_actor': 'Unauthorized Third Party',
'title': 'AssuranceAmerica Data Breach Exposes Personal Information of Over '
'600,000 South Carolina Residents',
'type': 'Data Breach'}