Elephant Insurance Services, LLC
ent_a6342ccb07f7fd1af1f2c4b4
Disclosures
14
State AG · 11 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
2,762,687
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Elephant Insurance Services, LLC
- Normalized
- elephant insurance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- elephant.com
Disclosure history (14)newest first
- Oregon State AGas victim2023-02-27
Elephant Insurance Services, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-02-27. The breach occurred during 1/1/0001 - 4/1/2022. The breach was discovered on 4/25/2022. 2,762,687 individuals were affected. Notice was sent on 5/25/2022.
- Vermont State AGas victim2023-01-13
Elephant Insurance Services, LLC notified consumers of a data breach where unauthorized access to employee email accounts occurred between September 2021 and March 2022. The incident was discovered in April 2022. The breach compromised names and addresses. The company reported the incident to federal law enforcement, secured systems, and offered 12 months of identity monitoring services.
- Delaware State AGas victim2023-01-13
Elephant Insurance Services, LLC filed a supplemental data event notice in Delaware regarding unauthorized access to employee email accounts between September 2021 and March 2022. The incident involved the unauthorized viewing of employee email accounts, potentially exposing customer name and address information. The company secured systems, reported to federal law enforcement, and offered 12 months of identity monitoring services via Kroll.
- California State AGas victim2023-01-13
Elephant Insurance Services, LLC disclosed unauthorized access to employee email accounts occurring between September 2021 and March 2022. The company identified unusual activity in April 2022. The investigation determined that name and address information of customers and employees was present in the affected emails. No confirmation of data exfiltration was made, but notice was sent out of an abundance of caution. The company engaged third-party specialists, secured systems, changed passwords, and offered identity monitoring services.
- New Hampshire State AGas victim2022-05-31
Elephant Insurance Services, LLC notified the NH AG of a data event affecting 101 NH residents. Unauthorized access occurred between March 26 and April 1, 2022, resulting in the viewing or copying of names and driver's license numbers. The incident was discovered on April 1, 2022. Notices were sent starting May 25, 2022, offering 12 months of credit monitoring.
- Washington State AGas victim2022-05-25
Elephant Insurance Services, LLC reported a cyberattack affecting 937 Washington residents. Unauthorized access occurred March 26–April 1, 2022, involving consumer PII including names, DOBs, and driver's license numbers. The incident was discovered on April 1, 2022, and notices were sent starting May 25, 2022. The company engaged forensic specialists, notified law enforcement, and offered 12 months of credit monitoring.
- Delaware State AGas victim2022-05-25
Elephant Insurance Services, LLC (and subsidiary Apparent Insurance) notified consumers of a data incident occurring between March 26, 2022, and April 1, 2022. The company identified unusual network activity and determined that consumer information, including names and government identifiers, may have been viewed or copied. The company reported the incident to federal law enforcement, notified state regulators, and offered 12 months of credit monitoring services through Kroll to affected individuals.
- South Carolina State AGas victim2022-05-25
Elephant Insurance Services, LLC notified South Carolina regulators of a breach where consumer information (names) was viewed/copied between March 26 and April 1, 2022. The company reported to federal law enforcement and offered 12 months of credit monitoring. The incident status is contained.
- Maine State AGas victim2022-05-25
Elephant Insurance Services, LLC reported an external system breach that occurred between March 26, 2022, and April 1, 2022. The breach was discovered on April 25, 2022. The incident affected 2,762,687 individuals in total, including 154 residents of Maine. The compromised information includes names in combination with driver's license or non-driver identification card numbers. Affected individuals were notified on May 25, 2022, and offered 12 months of identity theft protection services through Kroll.
- Massachusetts State AGas victim2022-05-25
Elephant Insurance Services, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-25. 402 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2022-05-25
Elephant Insurance Services LLC notified Montana residents of a data breach occurring between March 26 and April 1, 2022. Unauthorized access resulted in the viewing or copying of consumer information, including names and government identifiers. The company reported the incident to federal law enforcement and offered 12 months of credit monitoring.
- California State AGas victim2022-05-25
Elephant Insurance Services, LLC reported unauthorized access to consumer information between March 26 and April 1, 2022. The company identified unusual network activity in April 2022 and engaged third-party specialists to investigate. Consumer information, including names and potentially sensitive data, was viewed or copied. The company secured systems, notified law enforcement, and offered 12 months of credit monitoring to affected individuals.
- Indiana State AGas victim2022-05-25
Elephant Insurance Services, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-03-26 and was reported on 2022-05-25. 91,389 Indiana residents were affected. 2,762,687 individuals affected in total.
- Indiana State AGas victim2021-03-26
Elephant Insurance Services LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-01-01 and was reported on 2021-03-26. 14 Indiana residents were affected. 698 individuals affected in total.