Daisy Trudeau Insurance Services Data Breach Investigation

Recently, D&S reported to the Attorney General of California that it had experienced a data breach in which sensitive personal identifiable information in its care may have been accessed and acquired. According to the breach notice, D&S recently found unauthorized access to two employee email accounts.¹ As a result, D&S launched an investigation to determine the nature of the incident.

Through its investigation, on February 26, 2025, D&S confirmed that sensitive personal information in its systems may have been compromised by an unauthorized third party between February 21 and March 14, 2024. As a result, D&S began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. The exact type of personal information potentially exposed has not been made publicly available by Mark Thomas. However, according to state reporting guidelines, “personal information” can include the following types of information:

• Name
• Social Security number
• Driver’s license or state identification card number
• Account number, credit card number or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes or passwords
• Account passwords or personal identification numbers or other access codes

On March 24, 2025, D&S began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to California residents, D&S is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that D&S filed with the Attorney General of California is below.