Trinity Universal Insurance Company

The Washington State Office of the Attorney General disclosed a data breach affecting Trinity Universal Insurance Company (TUIC) in February 2024. The incident, classified as theft or an operational error, transpired between July 7 and July 10, 2023, compromising the sensitive data of 31,701 Washington residents. The exposed information included names, Social Security numbers, driver’s license numbers, financial records, and medical data—highly sensitive details that pose severe risks of identity theft, financial fraud, and privacy violations.The breach’s scope suggests a targeted or systemic failure in TUIC’s data protection measures, enabling unauthorized access to personally identifiable information (PII) and protected health information (PHI). Such exposures often lead to long-term repercussions for affected individuals, including credit damage, medical identity fraud, and potential blackmail. The inclusion of financial and medical data elevates the severity, as these categories are prime targets for cybercriminals seeking to monetize stolen information through dark web sales or phishing campaigns.Given the nature of the compromised data and the scale of the breach, TUIC faces regulatory scrutiny, potential lawsuits, and reputational harm. The incident underscores the critical need for robust cybersecurity frameworks, particularly in sectors handling sensitive consumer data like insurance.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=16489

TPRM report: https://www.rankiteo.com/company/trinity-solutions99

"id": "tri1044090725",
"linkid": "trinity-solutions99",
"type": "Breach",
"date": "7/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 31701,
                        'industry': 'Insurance',
                        'location': 'Washington, USA',
                        'name': 'Trinity Universal Insurance Company (TUIC)',
                        'type': 'Insurance Company'}],
 'data_breach': {'number_of_records_exposed': 31701,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              "driver's license numbers",
                                              'financial information',
                                              'medical data']},
 'date_publicly_disclosed': '2024-02-09',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Trinity Universal Insurance Company '
                '(TUIC). The breach, identified as theft or mistake, occurred '
                'between July 7 and July 10, 2023, affecting 31,701 Washington '
                'residents. The compromised information includes names, Social '
                "Security numbers, driver's license numbers, financial "
                'information, and medical data.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 "driver's license numbers",
                                 'financial information',
                                 'medical data'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'references': [{'date_accessed': '2024-02-09',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at Trinity Universal Insurance Company (TUIC)',
 'type': 'Data Breach'}