Illumifin Corp. Discloses Major Data Breach Affecting Insurance Policyholders
Illumifin Corp., a Greenville, South Carolina-based insurance technology and third-party administrator, revealed a data breach after detecting unauthorized network access in November 2025. The company, which employs over 2,500 people across eight locations, manages sensitive personal data for more than 100 insurance carriers in North America’s life, health, annuity, and long-term care markets.
The breach was first disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on behalf of Liberty Bankers Life Insurance Co., though it remains unclear whether the filing was submitted by Illumifin or the insurer. The company discovered the incident on November 4, 2025, notified affected clients on January 9, 2026, and provided them with lists of impacted individuals by February 25, 2026.
A forensic investigation confirmed that an unauthorized actor accessed and exfiltrated files containing policyholder data, including Social Security numbers. Since Illumifin operates as a third-party administrator, the exposed records belonged to consumers whose information was held on behalf of its insurance carrier clients some of whom may not have been aware the company stored their data.
In response, Illumifin has implemented additional security measures and is offering affected individuals complimentary identity monitoring services for one to two years. The company has also notified law enforcement and provided a dedicated contact line (877-431-5824) and mailing address for inquiries.
Given the exposure of Social Security numbers, the breach poses a significant risk of identity theft and fraud for impacted individuals.
Source: https://www.claimdepot.com/data-breach/illumifin-2026
illumifin cybersecurity rating report: https://www.rankiteo.com/company/illumifin
"id": "ILL1774758522",
"linkid": "illumifin",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Policyholders of 100+ insurance '
'carriers',
'industry': 'Insurance (Life, Health, Annuity, '
'Long-Term Care)',
'location': 'Greenville, South Carolina, USA',
'name': 'Illumifin Corp.',
'size': '2,500+ employees, 8 locations',
'type': 'Third-Party Administrator / Insurance '
'Technology'}],
'attack_vector': 'Unauthorized network access',
'customer_advisories': 'Complimentary identity monitoring services, dedicated '
'contact line (877-431-5824) and mailing address for '
'inquiries',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Social Security '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Policyholder data, Social '
'Security numbers'},
'date_detected': '2025-11-04',
'date_publicly_disclosed': '2026-01-09',
'description': 'Illumifin Corp., a Greenville, South Carolina-based insurance '
'technology and third-party administrator, revealed a data '
'breach after detecting unauthorized network access in '
'November 2025. The breach exposed sensitive personal data, '
'including Social Security numbers, of policyholders managed '
'on behalf of its insurance carrier clients.',
'impact': {'brand_reputation_impact': 'Significant',
'data_compromised': 'Social Security numbers, policyholder data',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'recommendations': 'Offer complimentary identity monitoring services for 1-2 '
'years to affected individuals',
'references': [{'source': 'Massachusetts Office of Consumer Affairs and '
'Business Regulation'}],
'regulatory_compliance': {'regulatory_notifications': 'Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation (on behalf '
'of Liberty Bankers '
'Life Insurance Co.)'},
'response': {'communication_strategy': 'Notification to affected clients (Jan '
'9, 2026), lists of impacted '
'individuals provided (Feb 25, 2026), '
'dedicated contact line and mailing '
'address',
'law_enforcement_notified': 'Yes',
'remediation_measures': 'Additional security measures '
'implemented',
'third_party_assistance': 'Forensic investigation'},
'title': 'Illumifin Corp. Major Data Breach Affecting Insurance Policyholders',
'type': 'Data Breach'}