{"id":3490841,"date":"2026-07-08T16:14:49","date_gmt":"2026-07-08T16:14:49","guid":{"rendered":"https:\/\/techingeek.com\/index.php\/2026\/07\/08\/another-significant-data-breach-revealed-millions-of-drivers-license-numbers\/"},"modified":"2026-07-08T16:14:49","modified_gmt":"2026-07-08T16:14:49","slug":"another-significant-data-breach-revealed-millions-of-drivers-license-numbers","status":"publish","type":"post","link":"https:\/\/techingeek.com\/index.php\/2026\/07\/08\/another-significant-data-breach-revealed-millions-of-drivers-license-numbers\/","title":{"rendered":"Another significant data breach revealed millions of driver\u2019s license numbers"},"content":{"rendered":"
<\/div>\n
\n

U.S. insurance firm AssuranceAmerica has announced a data breach involving the personal details and driver\u2019s license numbers of 6.9 million individuals, marking it as the most significant known leak of Americans\u2019 driver\u2019s license data this year.<\/p>\n

Established in 1998, AssuranceAmerica offers car and rental insurance to clients in over a dozen U.S. states. Being a major insurance entity, the company manages extensive data concerning potential insurance clients and vehicle operators, encompassing their personal details and data regarding their state-issued driver\u2019s licenses. In the possession of a malicious individual, a driver\u2019s license number could facilitate fraud and impersonation.<\/p>\n

In a data breach notification dispatched to clients and observed by TechCrunch, AssuranceAmerica revealed that it detected unauthorized access in its computer systems on March 17. The company completed its investigation on June 15, discovering that the intruders had extracted clients\u2019 names, contact details, and driver\u2019s license numbers.\u00a0<\/p>\n

The breach notification stated that the hackers also accessed data concerning clients\u2019 auto insurance policies and accounts, as well as information about their drivers and vehicles, and particulars about client claims.\u00a0<\/p>\n

The company did not elaborate on what other types of personal data were compromised.<\/p>\n

AssuranceAmerica did not disclose the exact reason for the breach but mentioned that the hackers \u201ctargeted one of the Company\u2019s employees\u201d and that the company subsequently \u201cdisabled compromised credentials.\u201d It remains unclear how those credentials were acquired, but past incidents involving the theft of employee credentials have been associated with password-stealing malware or the use of compromised software.<\/p>\n

TechCrunch sent inquiries regarding the situation to AssuranceAmerica CEO Joe Skruck and founder Guy Millner, including whether the company had engaged with the hackers or provided a ransom. Neither answered.<\/p>\n

According to a data breach report filed with the Indiana attorney general\u2019s office, AssuranceAmerica noted the breach as affecting 6.99 million individuals, with notification letters scheduled for distribution on July 10.<\/p>\n

An alternate copy of AssuranceAmerica\u2019s data breach notification, provided by the Maine attorney general\u2019s office at TechCrunch\u2019s request, also indicates the number of individuals affected is 6.99 million. (Maine\u2019s data breach portal is currently offline and under review following a fraudulent breach disclosure published on its website last month.)<\/p>\n

The occurrence at AssuranceAmerica coincides with a series of data breaches impacting driver\u2019s licenses and other identity documents in recent months. In June, the Texas state government reported that hackers compromised data related to at least 3 million driver\u2019s licenses and passport numbers during a breach affecting the state\u2019s parks and wildlife division.<\/p>\n

TechCrunch has previously covered numerous security flaws that collectively compromised millions of government-issued identity documents, including incidents involving a hotel check-in system, a money transfer application, a prison payphone provider, and a U.K. visa service. These data leaks arise as websites and apps increasingly require users to provide their identity documents to verify their legal age for access, amid a global initiative by governments to implement age-verification regulations.<\/p>\n<\/div>\n

When you buy through links in our articles, we may earn a small commission. This does not impact our editorial independence.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/div>\n
\n

U.S. insurance firm AssuranceAmerica has announced a data breach involving the personal details and driver\u2019s license numbers of 6.9 million individuals, marking it as the most significant known leak of Americans\u2019 driver\u2019s license data this year.<\/p>\n

Established in 1998, AssuranceAmerica offers car and rental insurance to clients in over a dozen U.S. states. Being a major insurance entity, the company manages extensive data concerning potential insurance clients and vehicle operators, encompassing their personal details and data regarding their state-issued driver\u2019s licenses. In the possession of a malicious individual, a driver\u2019s license number could facilitate fraud and impersonation.<\/p>\n

In a data breach notification dispatched to clients and observed by TechCrunch, AssuranceAmerica revealed that it detected unauthorized access in its computer systems on March 17. The company completed its investigation on June 15, discovering that the intruders had extracted clients\u2019 names, contact details, and driver\u2019s license numbers.\u00a0<\/p>\n

The breach notification stated that the hackers also accessed data concerning clients\u2019 auto insurance policies and accounts, as well as information about their drivers and vehicles, and particulars about client claims.\u00a0<\/p>\n

The company did not elaborate on what other types of personal data were compromised.<\/p>\n

AssuranceAmerica did not disclose the exact reason for the breach but mentioned that the hackers \u201ctargeted one of the Company\u2019s employees\u201d and that the company subsequently \u201cdisabled compromised credentials.\u201d It remains unclear how those credentials were acquired, but past incidents involving the theft of employee credentials have been associated with password-stealing malware or the use of compromised software.<\/p>\n

TechCrunch sent inquiries regarding the situation to AssuranceAmerica CEO Joe Skruck and founder Guy Millner, including whether the company had engaged with the hackers or provided a ransom. Neither answered.<\/p>\n

According to a data breach report filed with the Indiana attorney general\u2019s office, AssuranceAmerica noted the breach as affecting 6.99 million individuals, with notification letters scheduled for distribution on July 10.<\/p>\n

An alternate copy of AssuranceAmerica\u2019s data breach notification, provided by the Maine attorney general\u2019s office at TechCrunch\u2019s request, also indicates the number of individuals affected is 6.99 million. (Maine\u2019s data breach portal is currently offline and under review following a fraudulent breach disclosure published on its website last month.)<\/p>\n

The occurrence at AssuranceAmerica coincides with a series of data breaches impacting driver\u2019s licenses and other identity documents in recent months. In June, the Texas state government reported that hackers compromised data related to at least 3 million driver\u2019s licenses and passport numbers during a breach affecting the state\u2019s parks and wildlife division.<\/p>\n

TechCrunch has previously covered numerous security flaws that collectively compromised millions of government-issued identity documents, including incidents involving a hotel check-in system, a money transfer application, a prison payphone provider, and a U.K. visa service. These data leaks arise as websites and apps increasingly require users to provide their identity documents to verify their legal age for access, amid a global initiative by governments to implement age-verification regulations.<\/p>\n<\/div>\n

When you buy through links in our articles, we may earn a small commission. This does not impact our editorial independence.<\/em><\/p>\n","protected":false},"author":2,"featured_media":3490842,"comment_status":"open","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3490841","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts\/3490841"}],"collection":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/comments?post=3490841"}],"version-history":[{"count":0,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts\/3490841\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/media\/3490842"}],"wp:attachment":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/media?parent=3490841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/categories?post=3490841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/tags?post=3490841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}