Risk Strategies Data Breach Exposes Sensitive Personal and Medical Information
Risk Strategies (RSC Insurance Brokerage Inc.) disclosed a data breach on June 23, 2026, affecting at least 47 Massachusetts residents, though the total number of impacted individuals nationwide remains undisclosed. The incident exposed sensitive personal and medical data, including names, Social Security numbers (SSNs), medical records, and health, dental, or vision insurance details for some individuals.
The breach poses significant risks, as compromised SSNs can be exploited for identity theft, fraudulent accounts, or false tax filings, while medical and insurance data may lead to medical identity fraud, where attackers use stolen information to obtain healthcare services or submit fraudulent claims.
In response, Risk Strategies expressed regret and stated it has strengthened its security measures. Affected individuals were offered a complimentary 24-month membership to Epiq’s Privacy Solutions ID 3B Credit Monitoring, which includes:
- Three-bureau credit monitoring with alerts for key changes (e.g., new accounts, credit inquiries).
- Social Security number monitoring across loan applications, employment records, and tax filings.
- Dark web monitoring to detect fraudulent use of personal data.
- Identity theft insurance (up to $1 million) and unauthorized funds transfer reimbursement (up to $1 million).
- Dedicated identity restoration specialists and lost wallet assistance.
Affected individuals received unique activation codes with an enrollment deadline. Risk Strategies provided support contacts for inquiries (866-659-7098) and Epiq enrollment assistance (866-675-2006). The company was acquired by Brown & Brown on August 1, 2025, but continues operating under the Risk Strategies brand.
Source: https://www.claimdepot.com/data-breach/risk-strategies-2026
Risk Strategies / Meeker Sharkey Insurance cybersecurity rating report: https://www.rankiteo.com/company/risk-strategies
"id": "RIS1782434002",
"linkid": "risk-strategies",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'At least 47 Massachusetts '
'residents (nationwide total '
'undisclosed)',
'industry': 'Insurance',
'location': 'Massachusetts, USA',
'name': 'Risk Strategies (RSC Insurance Brokerage '
'Inc.)',
'type': 'Insurance Brokerage'}],
'customer_advisories': 'Affected individuals offered complimentary 24-month '
'credit monitoring and identity theft protection '
'services, including three-bureau credit monitoring, '
'SSN monitoring, dark web monitoring, identity theft '
'insurance, and dedicated restoration specialists.',
'data_breach': {'number_of_records_exposed': 'At least 47 (nationwide total '
'undisclosed)',
'personally_identifiable_information': 'Names, Social '
'Security numbers '
'(SSNs)',
'sensitivity_of_data': 'High (SSNs, medical data)',
'type_of_data_compromised': ['Personal Identifiable '
'Information (PII)',
'Medical records',
'Insurance details']},
'date_publicly_disclosed': '2026-06-23',
'description': 'Risk Strategies (RSC Insurance Brokerage Inc.) disclosed a '
'data breach on June 23, 2026, affecting at least 47 '
'Massachusetts residents, though the total number of impacted '
'individuals nationwide remains undisclosed. The incident '
'exposed sensitive personal and medical data, including names, '
'Social Security numbers (SSNs), medical records, and health, '
'dental, or vision insurance details for some individuals. The '
'breach poses significant risks, including identity theft, '
'fraudulent accounts, false tax filings, and medical identity '
'fraud.',
'impact': {'data_compromised': 'Sensitive personal and medical information, '
'including names, Social Security numbers '
'(SSNs), medical records, and health, dental, '
'or vision insurance details',
'identity_theft_risk': 'High (SSNs and medical data exposed)'},
'post_incident_analysis': {'corrective_actions': 'Strengthened security '
'measures'},
'references': [{'source': 'Risk Strategies Data Breach Disclosure'}],
'response': {'communication_strategy': 'Affected individuals notified with '
'unique activation codes and support '
'contacts',
'remediation_measures': 'Strengthened security measures',
'third_party_assistance': 'Epiq’s Privacy Solutions ID 3B Credit '
'Monitoring'},
'title': 'Risk Strategies Data Breach Exposes Sensitive Personal and Medical '
'Information',
'type': 'Data Breach'}