HiRoad Automobile Insurance notified Massachusetts regulators of a cybersecurity incident involving unauthorized access to its systems. The breach occurred between December 22, 2025, and January 15, 2026, and was discovered on January 23, 2026. An unauthorized actor accessed and acquired information, potentially including customer PII and government IDs. The incident involved third-party provider Navia.