Infinity Insurance Company
bd_14b38319d0452b45 · schema v1 · pii pii-v1
Full breach record for Infinity Insurance Company →Infinity Insurance Company reported a data breach affecting California residents. Between January 7 and April 4, 2021, an unauthorized actor accessed names and driver's license numbers via the company's online auto insurance quote application. The actor used information obtained elsewhere to populate driver's license numbers through the application's prefill feature. Infinity Insurance detected the incident, removed the vulnerable feature, conducted a comprehensive review, and reported the matter to law enforcement. Affected individuals were offered one year of complimentary credit monitoring through Experian IdentityWorks.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_baa523be7d205cb7Oregon State AGfiled 2021-05-25Candidate
- bd_e9242eba7636bde7Washington State AGfiled 2021-05-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-541278
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2021
- Raw hash
- aea39cdee4e858f0c43939bbece29f8f348227e8c6ad68e0bc30a0307d4e6f41
Reporting entity
- Name
- Infinity Insurance Companynorm: infinity insurance
Victim entity
- Name
- Infinity Insurance Companynorm: infinity insurance
Incident
- Discovered
- Apr 25, 2021
- Materiality determined
- May 25, 2021
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.