BROWN & BROWN, INC.

RSC Insurance Brokerage Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-01-15 and was reported on 2026-06-23. 50 Indiana residents were affected. 15,055 individuals affected in total.

RSC Insurance Brokerage, Inc. notified the New Hampshire Attorney General of a security incident involving unauthorized access to an employee's Microsoft 365 account. The unauthorized access occurred between January 15-16, 2026. The breach exposed the names and Social Security numbers of 17 New Hampshire residents, along with some medical and insurance information. Notifications were mailed on June 23, 2026, offering one year of credit monitoring.

RSC Insurance Brokerage, Inc notified Massachusetts residents of a data incident involving names, Social Security numbers, and health/insurance information. The company offered 24 months of complimentary credit monitoring via Epiq and stated it strengthened security measures. No specific attack vector or dates were provided in the notice.

Capstone Insurance Brokers Ltd, based in Canada, provides wide-ranging insurance services covering personal, business, and life and health insurance. They aim to offer unmatched professional service, guaranteeing customers top-rate policies. With their expertise, Capstone ensures personalized solutions that cater to individual and business needs with maximum value and protection. Their team is dedicated with a commitment to delivering superior customer service.

Allocation Services, Inc. dba IMPAXX notified the California AG of a data breach involving a former employee who retained personal information after employment ended. The company became aware of the incident in April 2024 and confirmed the retention on May 30, 2024. Affected data includes names, addresses, dates of birth, and Social Security numbers related to workers' compensation and liability claims. IMPAXX is offering 12 months of complimentary credit monitoring and identity theft protection to affected individuals.

Selman & Company, LLC notified Vermont AG of a data breach involving its third-party hosting provider, PAS-SG/PAS Hosting. On August 15, 2024, an unauthorized third party accessed files containing plan participants' personal information, including names, SSNs, and financial account numbers. Selman is offering 24 months of Equifax credit monitoring. The incident is contained; no misuse is currently known.

Selman & Company LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-15 and was reported on 2024-11-04. 2 Indiana residents were affected. 199 individuals affected in total.

Selman & Company, LLC reported a data breach to the Maine Attorney General's office following an external system breach (hacking) that occurred on August 15, 2024. The breach was discovered on October 17, 2024, and affected 2 Maine residents. The company began notifying affected individuals on November 4, 2024, and offered 24 months of credit monitoring services through Equifax Credit Watch Gold.

Academic HealthPlans, Inc. notified California regulators of a phishing incident targeting employee email accounts between August 6, 2020, and October 2, 2020. The breach involved unauthorized access to Microsoft Office 365 accounts, potentially exposing customer PHI and basic identity information. No evidence of data exfiltration was found, but the company engaged Kroll to provide one year of complimentary identity monitoring to affected individuals.

Academic HealthPlans, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2021-08-02. The breach occurred during 8/2/2020 - 10/2/2020. The breach was discovered on 6/4/2021. 15,189 individuals were affected. Notice was sent on 8/2/2021.