HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Infinity Insurance Company
bd_1098812adfda3755 · schema v1 · pii pii-v1
Full breach record for Infinity Insurance Company →21st Century Insurance Company reported that between January 20, 2021, and February 12, 2021, unknown malicious actors targeted its online automobile insurance quoting tool. The actors used personal information (name, address, date of birth) to obtain driver's license numbers via the system. The company contained the incident and is offering credit monitoring and fraud assistance to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-540528
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 4, 2021
- Raw hash
- 0dbc41a7fe0c3aa669ffc6a5c87299f467f97cd689ddf148e49491f86f0f1fd6
Reporting entity
- Name
- Infinity Insurance Companynorm: infinity insurance
Victim entity
- Name
- Infinity Insurance Companynorm: infinity insurance
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.