Pathfinder/LL&D Insurance Group Hit by PLAY Ransomware Attack, Exposing Sensitive Data of Thousands
Pathfinder/LL&D Insurance Group, a Houston-based independent insurance agency operating since 1913, disclosed a data breach affecting thousands of individuals. The incident was reported to the Texas Attorney General on April 29, 2026, with 7,382 Texas residents confirmed as impacted though the total nationwide figure remains undisclosed.
The breach originated from a PLAY ransomware attack, with the group claiming responsibility on September 15, 2025, via a dark web forum. The cybercriminals threatened to publish stolen data within four to five days of their announcement. Compromised information included client documents, payroll records, tax data, financial details, and sensitive personal identifiers.
Exposed consumer data encompassed names, addresses, Social Security numbers, driver’s license numbers, financial account details, medical records, health insurance information, and dates of birth.
Pathfinder/LL&D Insurance Group, headquartered at 12141 Wickchester Lane, Suite 500, Houston, Texas, has directed affected individuals to contact the company at 281-556-9999 for further details. The full scope of the breach and its long-term impact remain under review.
Source: https://www.claimdepot.com/data-breach/pathfinder-insurance-group-2026
Pathfinder/LL&D Insurance Group cybersecurity rating report: https://www.rankiteo.com/company/pathfinder-ll&d-insurance-group
"id": "PAT1777494552",
"linkid": "pathfinder-ll&d-insurance-group",
"type": "Ransomware",
"date": "9/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '7382 (Texas residents only)',
'industry': 'Insurance',
'location': '12141 Wickchester Lane, Suite 500, '
'Houston, Texas, USA',
'name': 'Pathfinder/LL&D Insurance Group',
'type': 'Insurance Agency'}],
'customer_advisories': 'Affected individuals directed to contact the company '
'at 281-556-9999',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '7382 (Texas residents only)',
'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'numbers',
'Driver’s license '
'numbers',
'Financial account '
'details',
'Medical records',
'Health insurance '
'information',
'Dates of birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Client documents',
'Payroll records',
'Tax data',
'Financial details',
'Personal identifiers']},
'date_publicly_disclosed': '2026-04-29',
'description': 'Pathfinder/LL&D Insurance Group, a Houston-based independent '
'insurance agency, disclosed a data breach affecting thousands '
'of individuals due to a PLAY ransomware attack. The breach '
'exposed client documents, payroll records, tax data, '
'financial details, and sensitive personal identifiers such as '
'names, addresses, Social Security numbers, driver’s license '
'numbers, financial account details, medical records, health '
'insurance information, and dates of birth.',
'impact': {'data_compromised': 'Client documents, payroll records, tax data, '
'financial details, sensitive personal '
'identifiers',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Under review',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'PLAY'},
'references': [{'source': 'Texas Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Texas '
'Attorney General'},
'response': {'communication_strategy': 'Affected individuals directed to '
'contact the company at 281-556-9999'},
'threat_actor': 'PLAY ransomware group',
'title': 'Pathfinder/LL&D Insurance Group Hit by PLAY Ransomware Attack, '
'Exposing Sensitive Data of Thousands',
'type': 'Ransomware'}