Inszone Insurance Services Data Breach Investigation

Recently, Inszone reported to the Attorney General of Maine that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been accessed and acquired. According to the breach notice, in April 2024, Inszone became aware of suspicious activity within its network environment. As a result, Inszone launched an investigation to determine the nature of the incident.

Through its investigation, Inszone confirmed that sensitive personal information in its systems may have been viewed and obtained by an unauthorized third party during the incident. As a result, Inszone began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On October 25, 2024, Inszone completed this review. The exact type of personal information potentially exposed has not been made publicly available by Inszone. However, according to state reporting guidelines, “personal information” can include the following types of information:

• Name
• Social Security number
• Driver’s license or state identification card number
• Account number, credit card number or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes or passwords
• Account passwords or personal indemnification numbers or other access codes

On November 5, 2024, Inszone began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, Inszone is providing affected individuals with a list of the specific types of sensitive information impacted and 12 months of complimentary credit monitoring services. A link to the form breach notification letters that Inszone filed with the Attorney General of Maine is below.