CRC Insurance Services, LLC

CRC Insurance Services, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2025-11-06. The breach occurred on 02/03/2025. 16 Montana residents were affected.

CRC Insurance Services, LLC reported a cybersecurity event to the NH AG on July 10, 2025. Unauthorized access occurred on Feb 3, 2025, via social engineering impersonating help desk personnel. Data accessed from a file server. Approx. 33 NH residents affected. Response included forensic investigation, law enforcement notification, and credit monitoring offer.

CRC Insurance Services, LLC based in Birmingham, Alabama, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-02-19 and reported on 2025-07-01. 1,701 Texas residents were affected. 60,272 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Medical Information;Other;Date of Birth.

CRC Insurance Services LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-03 and was reported on 2025-06-27. 154 Indiana residents were affected. 60,727 individuals affected in total.

CRC Insurance Services, LLC, a wholesale insurance brokerage, filed a supplemental notice with the Idaho Attorney General regarding a breach involving a third-party vendor. The incident potentially affected the personal information of 48 Idaho residents. CRC offered one year of complimentary credit monitoring to affected individuals not associated with business partners.

CRC Insurance Services, LLC reported that on January 18, 2023, it determined an unknown third-party gained unauthorized access to a small number of employee email accounts via phishing emails. The breach occurred on January 13, 2023. The actor exfiltrated a small percentage of emails containing personal information such as names and addresses. CRC activated its incident response team, engaged forensic firms, and contained the incident. Credit monitoring is being offered to affected individuals.

CRC Insurance Services, LLC reported that on January 18, 2023, it determined an unknown third-party gained unauthorized access to a small number of employee email accounts via phishing emails. The actor exfiltrated a small percentage of emails. The breach occurred on January 13, 2023. Affected data may include names, addresses, and other personal information. CRC engaged forensic firms, contained the incident, and offered credit monitoring.

CRC Insurance Services, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-26. The breach occurred from 1/15/2023 to 1/21/2023. 21 Montana residents were affected.

CRC Insurance Services LLC reported a cybersecurity incident to the Idaho Attorney General on July 26, 2023. Unauthorized access occurred via a phishing scheme targeting employee email accounts between January 13 and January 21, 2023. The incident affected 36 Idaho residents, exposing names, SSNs, driver's license numbers, passport numbers, financial account numbers, and health information. CRC engaged forensic vendors, reset passwords, reconfigured APIs, and offered one year of credit monitoring.

CRC Insurance Services, LLC reported a security incident on January 18, 2023, where phishing emails led to unauthorized access to a limited number of employee email accounts. The attacker exfiltrated a small percentage of emails. Exposed data may include names, addresses, and other personal information. CRC engaged forensic firms, secured accounts, and is offering Equifax credit monitoring services.