U.S.-based insurer AssuranceAmerica has confirmed a cyber incident that exposed the personal data and driver's license numbers of 6.9 million people, marking one of the largest identity-document breaches reported this year.
The company, which offers auto and rental insurance across multiple states, said the intrusion was first detected on March 17 and its investigation was completed on June 15. According to the breach notice, the compromised data included names, contact details, driver's license numbers, insurance policy information, account records, vehicle and driver details, and some claims data.
What was affected
AssuranceAmerica stated that the attackers appear to have focused on an employee account, after which the company disabled the compromised credentials. While the exact method has not been disclosed, the case highlights how a single access point can open the door to large-scale data exposure.
The company's filings with state authorities indicate that 6.99 million people were affected, with notification letters scheduled to be sent on July 10. The incident adds to a broader pattern of identity-document exposure across digital services, where driver's licenses and similar records are increasingly stored and processed online.
As more organizations rely on digital identity checks, the need for stronger access controls, credential protection, and data minimization is becoming more central to everyday security. This shift may help shape a more resilient digital identity future.