Social EngineeringFinancial ServicesFinancePhishingTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountCriticalContained

AssuranceAmerica Managing General Agency, LLC

bd_82d20d1f8c0bb015 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Mar 17, 2026

Filed

Jun 18, 2026

To disclose

13 weeks

Affected

611,046state residents only

Linked

14 filings

Confidence

64%

Full breach record for AssuranceAmerica Managing General Agency, LLC →

AssuranceAmerica Managing General Agency, LLC reported a cybersecurity incident to the South Carolina Office of the Attorney General on June 12, 2026. The breach occurred on March 16, 2026, when an employee was targeted by a malicious attack, leading to unauthorized access and data exfiltration. Affected data includes names, contact info, insurance policy details, driver's license numbers, Tax IDs, and Social Security numbers. The company engaged forensic specialists, disabled affected servers, and notified law enforcement.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due13 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 13 weeks / 93 days

Mar 16, 2026

Begins

Mar 17, 2026

Discovered

Jun 18, 2026

Filed

vs. sector median

+5 wks slower

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_747b1bb4796396fc2026-06-18Verified
California State AGbd_3c8d880838200b5b2026-06-17 · +1dCandidate
Iowa State AGbd_d7f91343353118502026-06-23 · +5dVerified
Massachusetts State AGbd_eaea343f5015a6722026-06-23 · +5dVerified

Show 6 more filings ↓up to 27d gap

New Hampshire State AGbd_ec6487edf433092e2026-06-23 · +5dVerified
Vermont State AGbd_f4e9c4014455ea2d2026-06-23 · +5dVerified
Rhode Island State AGbd_e6c4b69ac23f75632026-06-24 · +6dVerified
Texas State AGbd_cb654fd1cddab79d2026-06-26 · +8dVerified
Indiana State AGbd_02f147d102d39f132026-07-10 · +22dVerified
Nebraska State AGbd_0d12c4925158160d2026-07-15 · +27dVerified

Showing first 10 of 13 linked disclosures.

Name: AssuranceAmerica Managing General Agency, LLC
norm: assuranceamerica managing general agency

Name: AssuranceAmerica Managing General Agency, LLC
norm: assuranceamerica managing general agency
Industry: Financial Servicesllm

Discovered: Mar 17, 2026
Breach occurred: Mar 16, 2026 – Mar 17, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jun 12, 2026
Affected individuals: 611,046state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Hired external computer forensic specialists
Disabled and took offline the affected Company server devices
Notified law enforcement
Changes made: Resetting passwords
Deploying enhanced monitoring and threat detection software
Providing additional instruction to our personnel about cybersecurity threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(93 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

California State AGJun 17 · first

Oregon State AG+1d

South Carolina State AG+1d · this page

Iowa State AG+6d

Massachusetts State AG+6d

New Hampshire State AG+6d

Vermont State AG+6d

Rhode Island State AG+7d

Texas State AG+9d

Indiana State AG+23d

Nebraska State AG+28d

Pattern: first filing Jun 17 (CA), last Jul 15 (NE) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter-%20AssuranceAmerica%20Managing%20General%20Agency%2C%20Inc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2026
Raw hash: 53f754ec7205e78de7520729138bc0c1f6c10dea4c65f2f39c89f53c59baf2b9

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAssuranceAmerica Managing General Agency, LLC

Victim entityAssuranceAmerica Managing General Agency, LLC

Incidentdiscovered Mar 17, 2026

Stated responseHired external computer forensic specialists

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov