- A third -party seller informed farmers of a violation on May 30
- An investigation determined that a million people are affected
- The attackers stole names, driving license numbers and SSN
American Insurer Group Farmers Insurance confirmed that he had recently been the victim of a third -party cyber attack that has seen sensitive data on more than a million people.
A letter of notification of data violation sent to the persons concerned declares that the company was alerted to the attack on May 30, 2025, when one of its third -party suppliers identified unauthorized access to one of its databases.
The subsequent investigation, which concluded almost two months later, determined that the anonymous threat actors stolen names, birth dates, driving license numbers and the last four figures for social security numbers (SSN), for exactly 1,071,172 people.
Not all systems are affected in the same way
Mainly serving individuals and small businesses, Farmers Insurance is part of the Zurich Insurance Group and last year said $ 2.2 billion in profits.
It also has and operates several insurance companies, each focused on various markets, including 21st century insurance, farmers of the farmers’ life insurance company, Farmers financial solutions, insurance above all and Bristol West insurance.
The last two have also been affected, with others, perhaps also affected, because the letter indicates: “Some brands include above all and Bristol West”.
The first insurance is specialized in special lines, including mobile houses, manufactured houses, motorcycles, boats, VR, off -road vehicles and even things such as owner insurance / rental property.
Bristol West, on the other hand, covers car insurance, in particular for people who may not be eligible for standard fonts due to driving, credit or other risk factors.
At the time of the press, no threat actor has yet claimed the responsibility of the attack, and the farmers have not seen the mistreated data anywhere in the wild.
However, he encourages his customers to remain vigilant and to be very careful with incoming emails and other communications that claim to come from the company. In addition, it offers victims two years of identity theft protection services, free of charge.
Via The record