🐻California State AGFirst filing
Filed Apr 27, 2023bd_ab3f9f3371e4b34b
Arroyo Insurance Services, Inc. experienced a business email compromise (BEC) incident. On November 2, 2021, the company became aware of an outgoing spam campaign originating from an employee account. The California Attorney General form lists the breach date as September 2, 2021. An unauthorized party gained access to sensitive personal information, including names, addresses, and potentially Social Security numbers. Arroyo engaged third-party cybersecurity experts, reset passwords, enabled MFA, and offered 12 months of identity theft protection through IDX.