HackingFinancial ServicesFinanceVulnerability ExploitCustomer Data InvolvedIdentity (basic)Government IDHighContained

AssuranceAmerica Managing General Agency, LLC

bd_02e2d8f6265f0691 · schema v1 · pii pii-v2

Severity

High

Discovered

Aug 27, 2026

Filed

Oct 14, 2026

To disclose

7 weeks

Affected

22,952state residents only

Linked

3 filings

Confidence

66%

Full breach record for AssuranceAmerica Managing General Agency, LLC →2 incidents on file

AssuranceAmerica Managing General Agency, LLC, an automobile insurance underwriter, notified South Carolina residents of a security incident detected on August 27, 2026. The incident involved unauthorized access to a single API endpoint used for insurance quotes. The investigation, completed by September 8, 2026, confirmed that personal information including names, driver's license numbers, addresses, and dates of birth were compromised. AAMGA engaged forensic investigators, blocked source IPs, and is offering one year of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 48 days

Aug 27, 2026

Discovered

Oct 14, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Texas State AGbd_03fd6fd4165aebba2026-10-16 · +2dVerified
Massachusetts State AGbd_cbce3c05d1afc63d2026-10-01 · +13dVerified

Name: AssuranceAmerica Managing General Agency, LLC
norm: assuranceamerica managing general agency

Name: AssuranceAmerica Managing General Agency, LLC
norm: assuranceamerica managing general agency
Industry: Financial Servicesllm

Discovered: Aug 27, 2026
Materiality determined: —
Notification sent: Sep 8, 2026
Affected individuals: 22,952state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Engaged a third-party forensic investigator to investigate and contain the unauthorized activity
Stopped the unauthorized activity and blocked identified source IP addresses
Changes made: Reviewing our systems for updates and improvements to our system security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGOct 1 · first

South Carolina State AG+13d · this page

Texas State AG+15d

Pattern: first filing Oct 1 (MA), last Oct 16 (TX) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20AssuranceAmerica%20Managing%20General%20Agency%2C%20LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2026
Raw hash: e5e35f23ced2e3c8f250f7c21c55231b9ecbb0e6acba4cfba4143f24c3a66d89

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAssuranceAmerica Managing General Agency, LLC

Victim entityAssuranceAmerica Managing General Agency, LLC

Incidentdiscovered Aug 27, 2026

Stated responseEngaged a third-party forensic investigator to investigate and contain the unauthorized activity

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov