DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Farmers Insurance says 1 million customers affected by cyberattack on third-party vendor

Posted on August 26, 2025 by Dissent

Jonathan Greig reports:

More than one million customers of Farmers Insurance and its subsidiaries were impacted by a cyberattack on a third-party vendor.

Farmers Insurance, Farmers Insurance Exchange and several other affiliated companies filed breach notification documents in Maine, California and Massachusetts on Friday while also providing notice on the company website.

The company, which is itself a subsidiary of Zurich Insurance Group, said it was informed by a third-party vendor on May 30 that hackers accessed a database containing Farmers’ customer information.

The database contained names, dates of birth, driver’s license numbers and the last four digits of people’s Social Security numbers. The insurance company said 1,071,172 people were affected.

Read more at The Record.

Although the insurer did not respond to The Record’s inquiries about who the vendor was, DataBreaches contacted ShinyHunters to inquire whether this attack was part of the Salesforce campaign that has affected other insurers. In response, “Shiny” stated that yes, this was the work of ShinyHunters and Scattered Spider.

Category: Business Sector

Post navigation

← Silver State goes dark as cyberattack knocks Nevada websites offline
Auchan retailer data breach impacts hundreds of thousands of customers →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Fourth Circuit Weighs in on Standing in Data Breach Class Actions
  • ALT5 Sigma sues former consultant over alleged data breach
  • Is your cyberinsurance paid up? Are you sure?
  • Everest Group Interview on Collins Aerospace Breach — Daily Dark Web
  • Breaking Up With Edtech Is Hard to Do
  • Benworth Capital Partners negotiated with threat actors after more than 25,000 lenders had data stolen
  • Android Hit by 0-Click RCE Vulnerability in Core System Component
  • Attorney General James and Multistate Coalition Secure $5.1 Million from Illuminate Education For Failing to Protect Students’ Data
  • The Congressional Budget Office was hacked. It says it has implemented new security measures.
  • Clop Ransomware group claims the breach of The Washington Post

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Modern cars are spying on you. Here’s what you can do about it.
  • Attorney General James and Multistate Coalition Secure $5.1 Million from Education Software Company for Failing to Protect Students’ Data       
  • EU Parliament committee votes to advance controversial Europol data sharing proposal
  • DHS offers “disturbing new excuses” to seize kids’ biometric data, expert says
  • California Adds Injunctive Relief to its Right of Publicity Statute and Extends Liability to Digital Replicas

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.