AssuranceAmerica breach exposes 6.9 million driver’s licenses

Hackers infiltrated AssuranceAmerica’s systems on March 17, initiating a three-month intrusion that concluded only when the investigation wrapped on June 15. The compromised dataset includes names, contact details, policy information, and sensitive driver’s license numbers. While the company confirmed that intruders targeted a specific employee to gain access, it declined to elaborate on how the credentials were initially obtained or whether a ransom demand was involved. CEO Joe Skruck and founder Guy Millner did not respond to inquiries regarding the extent of the exposure.

Public filings with the Indiana and Maine attorneys general confirm the scale of the incident, with notification letters scheduled for distribution starting July 10. This event arrives amid a troubling trend of identity document theft, following a June attack on Texas government systems that exposed 3 million license and passport records. As companies and government entities increasingly mandate the submission of government-issued IDs for age verification and identity checks, the concentration of such sensitive data continues to attract sophisticated cyberattacks.