Data Breach at AssuranceAmerica Exposes 6.9 Million Driver's License Numbers
AssuranceAmerica, a U.S. insurance provider, has reported a data breach that has compromised the personal information and driver’s license numbers of around 6.9 million individuals, making it the largest known breach of such data in the United States this year. Established in 1998, AssuranceAmerica offers car and rental insurance across multiple states, handling sensitive information about customers, including their driver’s license details. Such information can be exploited for fraud and identity theft.
The breach was detected on March 17, and the company concluded its investigation on June 15, revealing that hackers accessed customers’ names, contact information, and driver’s license numbers. Additionally, the hackers obtained information related to customers’ auto insurance policies, accounts, vehicles, and claims. However, AssuranceAmerica did not disclose specific details about other types of personal information that may have been compromised.
While the company did not specify the exact cause of the breach, it indicated that the hackers targeted an employee, leading to the disabling of compromised credentials. The method of credential theft remains unclear, but previous incidents have often involved malware or compromised software.
AssuranceAmerica has listed the breach as affecting 6.99 million individuals, according to a data breach notification filed with the Indiana attorney general’s office. Notification letters to affected customers are scheduled for distribution on July 10. A separate notification shared by the Maine attorney general’s office corroborated the number of affected individuals, although Maine’s data breach portal is currently offline due to a prior fraudulent disclosure.
This incident follows a series of data breaches involving driver’s licenses and identity documents in recent months. In June, the Texas state government reported that hackers stole information on at least 3 million driver’s licenses and passport numbers during a breach affecting its parks and wildlife division. Previous reports have highlighted multiple security lapses that have led to the exposure of millions of government-issued identity documents, coinciding with a growing trend of websites and applications requiring users to submit identity documents for age verification amid global regulatory efforts.
