DisclosureLens
UnknownFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDPHIPIIMediumContained

INSURANCE OFFICE OF AMERICA, INC.

bd_ebf4d38ecb6e3f1f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 30, 2025

Filed

Jan 16, 2026

To disclose

29 weeks

Affected

111state residents only

Linked

4 filings

Confidence

66%
Full breach record for INSURANCE OFFICE OF AMERICA, INC.3 incidents on file

Insurance Office of America (IOA) notified Massachusetts residents of a security incident discovered on June 30, 2025. IOA, which provides insurance-related services to carriers, health plans, and employers, engaged external cybersecurity experts to investigate. The incident potentially affected personal information, including full names and other variable data, and possibly protected health information. IOA contained the event and is offering 24 months of complimentary credit monitoring through Epiq. No specific attack vector or threat actor was identified.

Massachusetts clock MA AG >90d29 weeks discovery → filing

Incident timeline

discovery → filing · 29 weeks / 200 days

Jun 30, 2025

Discovered

Jan 16, 2026

Filed

vs. sector median

+20 wks slower

This filing is one of 4 about the same incident.View merged incident
A leak claim by daixin about this victim predates this filing by 126 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
New Hampshire State AGJan 16 · first
Indiana State AGJan 16 · first
Massachusetts State AGJan 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.