AssuranceAmerica Suffers Third-Party Data Breach, Customer Data Exposed

About three months after it detected suspicious activity within its network systems, AssuranceAmerica has started alerting consumers.

The Atlanta-based managing general agency with about 9,500 agents selling personal auto, renters, and commercial auto policies in 14 states, said on March 17 it detected the suspicious activity targeting one employee.

The MGA said it notified authorities and immediately enlisted an outside forensic specialist. It was determined an unauthorized third party accessed the company’s systems through the targeted attack and copied “a number of data files,” according to the breach notice filed in at least a half-dozen states.

Related: NAIC Says Data Taken in Hack Has Been Published Online

AssuranceAmerica said that, due to the scope and the files involved, the investigation was only recently completed.

Some customer personal identifiable information was within accessed files, including names, contact information, insurance policy and account information, vehicle information, claims information, drivers’ license numbers, and Social Security numbers.

“We promptly disabled and took offline the affected company server devices,” Assurance America said. “To help prevent a simitar occurrence in the future, the company has implemented a number of measures designed to enhance the security of our IT systems and data stored in those systems.”