ISC Data Breach Exposes Sensitive Personal and Financial Information
Integrated Specialty Coverages, LLC (ISC), a Carlsbad, California-based insurance program administrator, has confirmed a data breach involving unauthorized access to sensitive customer information. The incident, detected between June 8 and June 11, 2026, stemmed from a third-party vendor’s cloud platform used for electronic document execution and management.
An unauthorized party accessed a single ISC workspace, downloading files containing personally identifiable information (PII). Exposed data includes names, addresses, driver’s license numbers, financial details (such as account and card numbers), and dates of birth. The breach affected 1,836 individuals in Texas alone, with notifications sent via U.S. Mail.
ISC reported the incident to the California and Texas Attorneys General, as required by law. The firm Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating potential legal action for affected individuals, including those who may have suffered financial loss or identity theft.
ISC, founded in 2016, specializes in underwriting commercial insurance programs including property, trucking, and workers’ compensation using data analytics and technology. The breach highlights risks associated with third-party vendor access in the insurance sector.
Source: https://www.claimdepot.com/investigations/isc-data-breach-2026
Integrated Security Corporation cybersecurity rating report: https://www.rankiteo.com/company/integrated-security-corporation
"id": "INT1788294610",
"linkid": "integrated-security-corporation",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1836 (Texas alone)',
'industry': 'Insurance',
'location': 'Carlsbad, California, USA',
'name': 'Integrated Specialty Coverages, LLC (ISC)',
'type': 'Insurance Program Administrator'}],
'attack_vector': 'Third-party vendor cloud platform',
'customer_advisories': 'Notifications sent via U.S. Mail to affected '
'individuals',
'data_breach': {'data_exfiltration': 'Files downloaded by unauthorized party',
'number_of_records_exposed': '1836 (Texas alone)',
'personally_identifiable_information': 'Names, addresses, '
'driver’s license '
'numbers, financial '
'details, dates of '
'birth',
'sensitivity_of_data': 'High (names, addresses, driver’s '
'license numbers, financial '
'account/card numbers, dates of birth)',
'type_of_data_compromised': 'Personally identifiable '
'information (PII), financial '
'details'},
'date_detected': '2026-06-08 to 2026-06-11',
'description': 'Integrated Specialty Coverages, LLC (ISC), a Carlsbad, '
'California-based insurance program administrator, confirmed a '
'data breach involving unauthorized access to sensitive '
'customer information. The incident stemmed from a third-party '
'vendor’s cloud platform used for electronic document '
'execution and management. An unauthorized party accessed a '
'single ISC workspace, downloading files containing personally '
'identifiable information (PII).',
'impact': {'data_compromised': 'Personally identifiable information (PII), '
'financial details (account and card numbers)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation',
'payment_information_risk': 'High',
'systems_affected': 'Third-party vendor’s cloud platform '
'(electronic document execution and management '
'workspace)'},
'initial_access_broker': {'entry_point': 'Third-party vendor cloud platform'},
'investigation_status': 'Ongoing (class action investigation)',
'post_incident_analysis': {'root_causes': 'Unauthorized access via '
'third-party vendor’s cloud '
'platform'},
'references': [{'source': 'Class action law firm (Shamis & Gentile P.A.)'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.',
'regulatory_notifications': 'Reported to California '
'and Texas Attorneys '
'General'},
'response': {'communication_strategy': 'Notifications sent via U.S. Mail to '
'affected individuals'},
'threat_actor': 'Unauthorized party',
'title': 'ISC Data Breach Exposes Sensitive Personal and Financial '
'Information',
'type': 'Data Breach'}