Hagerty Insurance Agency, LLC

Hagerty Insurance Agency, LLC notified Montana residents that between Feb 2 and Feb 16, 2021, malicious bots exploited its public-facing 'Instant Quote' feature to harvest personal information embedded in source code. Data accessed included names, driver's license numbers, and dates of birth. Hagerty blocked the bots and offered 12 months of Experian IdentityWorks.

Hagerty Insurance Agency, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-02 and was reported on 2021-04-09. 323 Indiana residents were affected. 149,760 individuals affected in total.

Hagerty Insurance Agency, LLC reported an external system breach (hacking) that occurred on February 2, 2021, and was discovered on February 16, 2021. The breach affected 6 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company notified affected individuals on April 9, 2021, and offered 12 months of identity theft protection services through Experian IdentityWorksSM.

Hagerty Insurance Agency, LLC notified the NH Attorney General of a cybersecurity event involving unauthorized access to consumer personal information via its public-facing 'Instant Quote' web feature. Automated bots exploited a vulnerability where personal data (including driver's license numbers) was embedded in webpage source code. The incident affected approximately 27 New Hampshire residents. Hagerty disabled the feature, implemented rate limiting and CAPTCHA, and engaged third-party security specialists for penetration testing.

Hagerty Insurance Agency, LLC disclosed that automated bots exploited a vulnerability in its public-facing 'Instant Quote' feature to access personal information, including names, driver's license numbers, and dates of birth, embedded in the webpage source code. The incident was detected on February 2, 2021, when suspicious quote activity was observed. Hagerty immediately deployed mechanisms to block bot activity and contained the incident. Affected individuals were offered 12 months of complimentary identity theft protection through Experian.

Hagerty Insurance Agency, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-23. 330 Massachusetts residents were affected. The report records the breach type as electronic.

Hagerty Insurance Agency, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-02-24. 13 Massachusetts residents were affected. The report records the breach type as electronic.

Hagerty Insurance Agency, LLC notified NH AG of a database security error on Feb 14-15, 2012. Human error in web site changes exposed NH residents' PII (name, address, DL, DOB, etc.) to other logged-in users. 4 NH residents affected. No evidence of unauthorized retrieval. Incident resolved.