HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
FARMERS INSURANCE EXCHANGE
bd_9afb6aacb234e39e · schema v1 · pii pii-v1
Full breach record for FARMERS INSURANCE EXCHANGE →Farmers Insurance Exchange reported a security incident involving a third-party vendor's database. An unauthorized actor accessed customer information for approximately one hour on May 29, 2025. The breach affected 185 New Hampshire residents, exposing names, addresses, dates of birth, driver's license numbers, and the last four digits of Social Security numbers. Farmers contained the incident, engaged forensic experts, and began notifying affected residents on August 22, 2025, offering 24 months of credit monitoring.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_640b89a4c48862f3Iowa State AGfiled 2025-08-22Candidate
- bd_641a3c5356a7d18cMontana State AGfiled 2025-08-22Verified
- bd_79b4e01b1bc2dd08Maine State AGfiled 2025-08-22Verified
- bd_cdbdcdd70760a334California State AGfiled 2025-08-22Verified
Show 3 more filings ↓Show fewer ↑up to 109d gap
- bd_32fc259e6a6fb47cOregon State AGfiled 2025-08-25(3d gap)Verified
- bd_844e3a4ba41f21e3California State AGfiled 2025-12-03(103d gap)Verified
- bd_3d574addd193bf62Texas State AGfiled 2025-12-09(109d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/farmers-insurance-exchange-group-20250822.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 22, 2025
- Raw hash
- ff472f400a5a449af0c9d510a1de2fe394bee00a89dd265004d1f99992c50fd5
Reporting entity
- Name
- DLA PIPER LLP (US)norm: dla piper llp us
Victim entity
- Name
- FARMERS INSURANCE EXCHANGEnorm: farmers insurance exchange
Incident
- Discovered
- May 30, 2025
- Materiality determined
- —
- Notification sent
- Aug 22, 2025
- Affected individuals
- 185
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection & Antitrust Bureau
- Initial access
- supply_chain
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.