Baja Bound Insurance Services, Inc. discovered on December 16, 2015, that an agent's email account may have been compromised via a phishing attack. The incident potentially exposed personal information including names, addresses, dates of birth, driver's license numbers, and credit card numbers. Social Security numbers were not involved. The company offered one year of identity monitoring through Kroll and implemented two-factor authentication for email accounts as remediation.