Another massive data breach exposed millions of driver’s license numbers

AssuranceAmerica, a prominent U.S. insurance provider, has revealed a significant data breach that has compromised the personal data, including driver’s license numbers, of approximately 6.9 million individuals. This incident marks the largest known leak of driver’s license information in the United States for the year. Founded in 1998, AssuranceAmerica offers car and rental insurance across multiple states, handling sensitive information about potential customers and drivers. Such data, particularly driver’s license numbers, can be exploited for identity theft and fraud if it falls into the wrong hands. In a notice to customers, AssuranceAmerica disclosed that unauthorized access to their systems was detected on March 17, with the investigation concluding on June 15. The findings confirmed that hackers had obtained not only names and contact details but also driver’s license numbers and additional information related to customers’ auto insurance policies, vehicles, and claims. While AssuranceAmerica has not detailed exactly what other types of personal information were compromised, they indicated that the breach stemmed from a targeted attack on one of their employees, leading to the disabling of the compromised credentials. The specifics of how the credentials were obtained remain unclear, although past incidents suggest that such breaches are often linked to malware or compromised software. TechCrunch reached out to AssuranceAmerica’s CEO, Joe Skruck, and founder, Guy Millner, for further clarification, including whether the hackers were contacted or if a ransom was paid. However, no responses were received. According to records shared with the Indiana attorney general’s office, AssuranceAmerica reported that the breach impacted 6.99 million individuals, with notification letters expected to go out on July 10. A similar notification from Maine’s attorney general’s office corroborated this figure, though the state’s data breach portal is currently undergoing review. This breach follows a concerning trend, as several recent data leaks have exposed driver’s license and identity document information. In June, the Texas state government reported that hackers accessed data concerning at least 3 million driver’s licenses and passport numbers during a breach linked to its parks and wildlife division. Prior reports by TechCrunch have highlighted various security failures that have led to the exposure of millions of government-issued identity documents. As more platforms require users to verify their identity for age compliance, these data breaches raise significant concerns about the security of personal information in an increasingly digital world.