Root Insurance Company
ent_9f453341e8a6d891225993eb
Disclosures
5
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
73,238
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Root Insurance Company
- Normalized
- root insurance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Root, Inc.— per SEC Exhibit 21 filing
Disclosure history (5)newest first
- California State AGas victim2021-03-04
Root Insurance Company identified unusual account creation patterns on January 28, 2021, with activity believed to have started in the preceding week. Attackers created accounts for individuals with no prior relationship to Root using names and dates of birth not obtained from Root to generate insurance quotes. This triggered an application prefill process that populated driver's license numbers, dates of birth, and vehicle information (VIN, year, make, model) in the accounts. Root notified law enforcement, stopped suspicious quote/purchase activity, and implemented additional security measures. Affected individuals were offered one year of Experian IdentityWorks.
- Massachusetts State AGas victim2021-02-25
Root Insurance Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-25. 276 Massachusetts residents were affected. The report records the breach type as electronic.
- Oregon State AGas victim2021-02-25
Root Insurance Company reported a data breach to the Oregon Attorney General. The breach was reported on 2021-02-25. The breach occurred during 1/21/2021 - 1/28/2021. The breach was discovered on 1/28/2021. 61,198 individuals were affected. Notice was sent on 2/25/2021.
- Indiana State AGas victim2021-02-25
Root Insurance Company reported a data breach to the Indiana Attorney General. The breach occurred on 2021-01-19 and was reported on 2021-02-25. 719 Indiana residents were affected. 73,238 individuals affected in total.
- Illinois State AGas victim2021-01-01
ROOT INSURANCE COMPANY filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-114). The register records the breach as discovered on January 28, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.