AssuranceAmerica Data Breach Exposes 6.9 Million Driver’s License Numbers

U.S. insurer AssuranceAmerica has confirmed a data breach exposing the personal information and driver’s license numbers of roughly 6.9 million people, marking the largest known exposure of Americans’ driver’s license data so far this year. The Atlanta-based company, founded in 1998, provides car and rental insurance across more than a dozen U.S. states and routinely […] The post AssuranceAmerica Data Breach Exposes 6.9 Million Driver’s License Numbers appeared first on Cyber Security News.

U.S. insurer AssuranceAmerica has confirmed a data breach exposing the personal information and driver’s license numbers of roughly 6.9 million people, marking the largest known exposure of Americans’ driver’s license data so far this year. The Atlanta-based company, founded in 1998, provides car and rental insurance across more than a dozen U.S. states and routinely handles sensitive information tied to policyholders and vehicle drivers. AssuranceAmerica detected suspicious activity in its systems on March 17, 2026, tracing back to malicious activity that began the day before and targeted one of the company’s employees. AssuranceAmerica Data Breach The company engaged external forensic specialists, and its investigation into which files were compromised concluded on June 15, 2026, after which affected individuals began receiving notification letters. Regulatory filings show notices were also submitted to the Maine and Indiana attorneys general, with the total number of affected persons listed at 6,998,886. According to the breach notice, hackers accessed and copied files containing customers’ names, contact information, driver’s license numbers, and Social Security numbers. The stolen data also included auto insurance policy and account details, information about drivers and vehicles, and records related to customer claims. The company has not disclosed the full scope of additional personal information collected, but it is offering identity theft protection services to affected individuals and has directed people to monitor their credit reports through Equifax, Experian, and TransUnion. AssuranceAmerica classified the incident as an external hacking attack involving phishing, noting that attackers targeted a single employee before the company detected the intrusion and disabled the compromised credentials. In response, the insurer terminated unauthorized sessions, isolated affected systems, reset passwords, deployed enhanced monitoring tools, and notified law enforcement. The exact method used to obtain the employee’s credentials has not been disclosed, though similar incidents in the past have involved password-stealing malware or compromised third-party software. This breach adds to a troubling run of incidents this year exposing government-issued identity documents, including a Texas state agency breach that leaked at least 3 million driver’s license and passport numbers in June, along with earlier lapses tied to a hotel check-in system, a money transfer app, a prison payphone provider, and a UK visa service. These repeated exposures come as more websites and apps require users to submit identity documents for age verification, raising fresh concerns about how such sensitive data is stored and protected. Driver’s license numbers, unlike passwords, cannot simply be reset, making stolen records like these especially valuable to fraudsters attempting identity theft or insurance fraud. Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google. The post AssuranceAmerica Data Breach Exposes 6.9 Million Driver’s License Numbers appeared first on Cyber Security News.