Insurance
19 organizations, 65 confirmed incidents.
Insurance covers carriers, brokers and claims administrators holding policyholder, applicant and claims data, which can include health, financial and, for life and health lines, medical underwriting detail. Insurers in the US are chartered and supervised state by state, so an incident is reported both under the general state data-breach notification statute and under whatever breach-reporting rule the relevant state insurance regulator has separately adopted for the carriers, brokers and administrators it licenses.
Incidents by year
| Year | Confirmed incidents |
|---|---|
| 2026 | 7 |
| 2025 | 4 |
| 2024 | 5 |
| 2023 | 14 |
| 2022 | 10 |
| 2021 | 13 |
| 2020 | 4 |
| 2019 | 5 |
| 2014 | 3 |
Top organizations by confirmed incidents
Questions and answers
How many confirmed incidents involve Insurance organizations on Breach Census?
65 confirmed incidents across 19 organizations in the Insurance sector are recorded on Breach Census.
Which year had the most confirmed Insurance incidents?
2023, with 14 confirmed incidents, the most of any year on record for this sector.
Which attack types are most common in the Insurance sector?
Among Insurance sector incidents that carry an attack-type classification, the most common are Ransomware Attack, Hacking/IT Incident, Unauthorized Access/Disclosure.
What counts as a confirmed incident for the Insurance sector?
An incident counts here once its primary organization carries the Insurance sector label and the incident itself has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.