Anderson & Murison, Inc., a wholesale insurance broker, disclosed a data security incident involving its web-based personal umbrella rating system. Between June 1, 2014, and July 18, 2014, umbrella applications were inadvertently accessible on the internet, exposing personal information including names, addresses, dates of birth, and driver's license numbers. The company discovered the misconfiguration on July 18, 2014, secured the server, and notified the California Attorney General. Kroll was engaged to provide one year of complimentary identity theft protection to affected individuals.