GOOSEHEAD INSURANCE, INC.

Goosehead Insurance, Inc. filed Item 1C of Form 10-K disclosing its cybersecurity risk management and governance framework. The company explicitly states that in 2025, it did not identify any cybersecurity incidents that have materially affected or are reasonably likely to materially affect its business strategy, results of operations, or financial condition. No specific breach or incident was disclosed.

Goosehead Insurance Agency, LLC notified California residents of an unauthorized access incident occurring between March 6 and March 13, 2025. An external actor accessed systems and copied files containing personal information, including names and other breached elements. The company implemented technical security measures and is offering credit monitoring.

Goosehead Insurance Agency LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-03-06 and was reported on 2025-10-10. 191 Indiana residents were affected. 29,324 individuals affected in total.

Goosehead Insurance Agency, LLC notified the New Hampshire Attorney General of a data event affecting 13 NH residents. Unauthorized access occurred March 6-13, 2025, resulting in file encryption and data exfiltration. Data included names, SSNs, driver's licenses, and financial account info. Notice sent October 10, 2025.

Goosehead Insurance, Inc. operates as a holding company for Goosehead Financial, LLC that engages in the provision of personal lines insurance agency services in the United States. The company offers homeowner's, automotive, dwelling property, flood, wind, earthquake, excess liability or umbrella, motorcycle, recreational vehicle, general liability, property, and life insurance products and services. The company was founded in 2003 and is headquartered in Westlake, Texas.