AssuaranceAmerica Data Breach Exposes Personal Information of Nearly 7 Million Individuals Featured
Driver’s license numbers, insurance policy information, and other personal data may have been compromised.
AssuranceAmerica Managing General Agency, LLC has disclosed a significant data breach affecting approximately 6.9 million individuals, making it one of the largest known U.S. insurance data breaches reported in 2026. According to the company, an unauthorized third party gained access to portions of its information technology environment and copied files containing customer information after targeting one of the company’s employees.
AssuranceAmerica, an Atlanta-based managing general agency that provides automobile, renters, and commercial auto insurance through a network of independent agents across multiple states, discovered suspicious activity on March 17, 2026. The company completed its forensic investigation on June 15, 2026, after determining which individuals may have been affected.
What Information Was Exposed?
According to the company’s data breach notification, the information involved may vary from person to person but could include:
- Full name
- Contact information
- Driver’s license number
- Automobile insurance policy and account information
- Driver and vehicle information
- Claims-related information
For some individuals, the exposed information may also include Social Security numbers or Tax Identification Numbers, depending on the records maintained by the company. AssuranceAmerica has indicated that the specific information involved differs among affected individuals.
How Did the Breach Occur?
AssuranceAmerica stated that the incident began after an attacker targeted one of the company’s employees. The company reported that unauthorized access was obtained to portions of its IT environment, allowing files containing customer information to be copied. While AssuranceAmerica has stated that compromised employee credentials were disabled after the incident was discovered, it has not publicly disclosed the precise method used to obtain those credentials or identified any group responsible for the attack.
Why Driver’s License Numbers Matter
Unlike passwords, driver’s license numbers generally cannot be changed after they have been exposed. Criminals may attempt to use this information, together with other personal details, to impersonate victims, open fraudulent accounts, bypass identity verification procedures, or conduct phishing and social engineering attacks.
If Social Security numbers were also exposed, the potential risk of identity theft may be greater.
What Should Affected Individuals Do?
If you receive a notification letter from AssuranceAmerica, consider taking the following steps:
- Review the letter carefully to determine exactly what information was involved.
- Monitor your financial accounts and insurance accounts for unauthorized activity.
- Obtain and review your credit reports for unfamiliar accounts or inquiries.
- Consider placing a fraud alert or security freeze with the major credit reporting agencies if your Social Security number was exposed.
- Remain cautious of unsolicited emails, telephone calls, or text messages requesting personal information or referencing your insurance policy.
Are Lawsuits Being Investigated?
Following disclosure of the incident, several law firms announced investigations into potential class action litigation on behalf of individuals whose personal information may have been compromised. These investigations are in their early stages, and no court has determined whether AssuranceAmerica is legally responsible for any damages resulting from the incident.
Learn More About Your Legal Rights
If you received a notice stating that your personal information may have been affected by the AssuranceAmerica data breach, you may have legal rights.
Individuals who experienced identity theft, fraud, or other losses following the breach—or who received notice that sensitive personal information was exposed—may wish to learn more about the ongoing investigations.
If you received a notification from AssuranceAmerica regarding this data breach, you can complete the form on this page to learn whether you may qualify to participate in a potential class action lawsuit.