Infinity Insurance Company
ent_019e5b5d546eaacd96b3f7c775e3f7a1
Disclosures
15
State AG · 8 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
5,724,732
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Infinity Insurance Company
- Normalized
- infinity insurance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900Y099R65MRDHN35
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Infinity Property and Casualty Corporation— per GLEIF relationship records
Disclosure history (15)newest first
- New Hampshire State AGas victim2021-05-26
Infinity Insurance Company notified the NH Attorney General of a data security incident involving online auto insurance quote applications. Between Jan 7 and Apr 4, 2021, an unauthorized actor used stolen names and information to access driver's license numbers via the application's prefill feature. 229 NH residents were affected. Infinity notified law enforcement, removed the driver's license view capability, implemented CAPTCHA, and offered 1 year of credit monitoring.
- California State AGas victim2021-05-25
Infinity Insurance Company reported that an unauthorized actor accessed names and driver's license numbers of individuals via its online auto insurance quote application between January 7 and April 4, 2021. The actor entered information obtained elsewhere into the application prefill process. The company removed the ability to view driver's license numbers in the quote process and offered one year of credit monitoring.
- Indiana State AGas victim2021-05-25
Infinity Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2021-01-07 and was reported on 2021-05-25. 631 Indiana residents were affected. 313,404 individuals affected in total.
- Massachusetts State AGas victim2021-05-25
Infinity Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-05-25. 1,629 Massachusetts residents were affected. The report records the breach type as electronic.
- Oregon State AGas victim2021-05-25
Infinity Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2021-05-25. The breach occurred during 1/7/2021 - 4/4/2021. The breach was discovered on 4/25/2021. 313,404 individuals were affected. Notice was sent on 5/25/2021.
- Washington State AGas victim2021-05-25
Infinity Insurance Company notified Washington AG of a cyberattack affecting 639 residents. Unauthorized actors exploited an insurance quote application to access names and driver's license numbers between Jan 7 and Apr 4, 2021. Infinity detected the incident on Apr 25, 2021, notified law enforcement, and began mailing notices on May 25, 2021, offering one year of credit monitoring.
- New Hampshire State AGas victim2021-03-17
Infinity Insurance Company notified the NH Attorney General of unauthorized access to its network servers in December 2020. The incident affected approximately 34 New Hampshire residents, including consumers and employees of Infinity, Merastar, and United Insurance. Affected data included names, Social Security numbers, driver's license numbers, and limited medical information. The company secured systems, notified the FBI, and offered credit monitoring.
- South Carolina State AGas victim2021-03-17
Infinity Insurance Company notified South Carolina AG of unauthorized access to company servers in December 2020. The incident involved brief, unauthorized access to files containing names. The company secured systems, conducted a review, and offered one year of Experian IdentityWorks credit monitoring to affected individuals.
- Washington State AGas victim2021-03-16
Infinity Insurance Company notified Washington AG of unauthorized access to its network on Dec 26, 2020. The incident affected 606 Washington residents (252 consumers and 354 employees). Data exposed included SSNs, driver's licenses, and limited medical info. FBI was notified, and credit monitoring was offered.
- Oregon State AGas victim2021-03-16
Infinity Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-16. The breach occurred during 12/14/2020 - 12/27/2020. The breach was discovered on 2/18/2021. 5,724,732 individuals were affected. Notice was sent on 3/16/2021.
- California State AGas victim2021-03-16
Infinity Insurance Company detected unauthorized access to files on certain company servers on December 26, 2020. The investigation identified brief, unauthorized access occurring between December 14 and December 27, 2020. A review completed on February 18, 2021, determined that names were involved. The company secured affected systems and offered one year of complimentary credit monitoring via Experian IdentityWorks. The incident affected both customers and employees.
- Massachusetts State AGas victim2021-03-16
Infinity Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-16. 212 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2021-03-16
Infinity Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2020-12-14 and was reported on 2021-03-16. 714 Indiana residents were affected. 5,724,732 individuals affected in total.
- Illinois State AGas victim2021-01-01
INFINITY INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-136). The register records the breach as discovered on December 26, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2021-01-01
INFINITY INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-192). The register records the breach as discovered on January 7, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.