HackingIdentity (basic)Government IDMediumContained

DOXA INSURANCE HOLDINGS LLC

bd_a4e42f54a1a75a65 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 3, 2026

To disclose

—

Affected

3state residents only

Linked

3 filings

Confidence

67%

Full breach record for DOXA INSURANCE HOLDINGS LLC →

Doxa Insurance Holdings, LLC notified Massachusetts residents of a cybersecurity incident impacting personal data. The company reported the incident to the FBI and offered 24 months of credit monitoring and identity theft protection via Cyberscout/Identity Force. The breach involved identity data (SSN, DOB, driver's license) but specific counts and discovery dates were not disclosed in the notification letter.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Aug 3, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_50a3742e752ce0592026-08-03Verified
Vermont State AGbd_ebdc53c6744a5ddc2026-07-27 · +7dCandidate

Name: DOXA INSURANCE HOLDINGS LLC
norm: doxa insurance

Name: DOXA INSURANCE HOLDINGS LLC
norm: doxa insurance

Discovered: —
Materiality determined: —
Notification sent: Jul 27, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI of the incident in lieu of filing a local police report
Initial access: valid_credentials

During the incident: Notified the FBI of the incident in lieu of filing a local police report
Offered complimentary ID theft protection and monitoring services provided by Cyberscout through Identity Force
Changes made: Offered 24 months of credit monitoring/alerts
Established a help line available for 90 days
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGJul 27 · first

New Hampshire State AG+7d

Massachusetts State AG+7d · this page

Pattern: first filing Jul 27 (VT), last Aug 3 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1274-doxa-insurance-holdings-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2026
Raw hash: ba9cc1c54c1ede6598465bec81b66d8224dc702ca6b32dad326983d16d2ecaf8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDOXA INSURANCE HOLDINGS LLC

Victim entityDOXA INSURANCE HOLDINGS LLC

IncidentUnknown

Stated responseNotified the FBI of the incident in lieu of filing a local police report

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov