D&S Insurance Agency, Inc.

D&S Insurance Agency, Inc. reported that an unauthorized individual accessed two employee email accounts between February 21, 2024, and March 14, 2024. The company discovered the incident on February 26, 2025, following a forensic investigation. Personal information, including identity data, may have been accessed. The company engaged outside cybersecurity professionals and is offering complimentary identity monitoring services to affected individuals.

D&S Insurance Agency, Inc. notified the Maryland Attorney General of a security incident affecting one Maryland resident. Unauthorized access to two employee email accounts occurred between February 21, 2024, and March 14, 2024. The breach exposed personal information including names, SSNs, driver's license numbers, financial account data, and health insurance details. D&S engaged forensic investigators, notified the resident on March 24, 2025, and provided 12 months of complimentary credit monitoring.

Affected (this filing):