INSURANCE OFFICE OF AMERICA, INC.
bd_ebf4d38ecb6e3f1f · schema v1 · pii pii-v1
Full breach record for INSURANCE OFFICE OF AMERICA, INC. →2 incidents on fileInsurance Office of America (IOA) notified Massachusetts residents of a security incident discovered on June 30, 2025. IOA, which provides insurance-related services to carriers, health plans, and employers, engaged external cybersecurity experts to investigate. The incident potentially affected personal information, including full names and other variable data, and possibly protected health information. IOA contained the event and is offering 24 months of complimentary credit monitoring through Epiq. No specific attack vector or threat actor was identified.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 30, 2025
Discovered
Jan 16, 2026
Filed
vs. sector median
+20 wks slower
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitedaixinbd_e3c12e2f5899425b2025-09-11 · +127dVerified by operator
Regulatory filings (6) · sorted by filing gap
- New Hampshire State AGbd_17bd8478f3f372c92026-01-16Verified by operator
- Nebraska State AGbd_48967240a596ac7f2026-01-16Verified
- California State AGbd_4c989eca675e12072026-01-16Verified
- Indiana State AGbd_75f2ffc917a84d452026-01-16Verified by operator
Show 2 more filings ↓Show fewer ↑up to 5d gap
- Maine State AGbd_d25c4273180919372026-01-16Verified by operator
- Texas State AGbd_23b7cd8d3b9c09b12026-01-21 · +5dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Jan 16 (NH), last Jan 21 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.