July 8, 2026: U.S. insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver's license numbers of 6.9 million people—the largest known spill of Americans' driver's license information this year, per TechCrunch.
What AssuranceAmerica confirmed
Founded in 1998, AssuranceAmerica sells car and rental insurance across more than a dozen states. It sits on exactly the kind of data identity thieves want: names, contact details, policy metadata, and state-issued driver's license numbers usable for fraud and impersonation.
In a customer notification letter seen by TechCrunch, the company said it discovered hackers in its systems on March 17, 2026, finished investigating on June 15, and found intruders stole names, contact information, driver's license numbers, auto insurance policy and account details, driver and vehicle information, and claims-related data.
AssuranceAmerica said hackers targeted an employee and that it disabled compromised credentials. It did not publicly explain how those credentials were taken—though trade reporting has linked similar 2026 incidents to infostealer malware and compromised third-party tools.
Scale of the spill
An Indiana attorney general filing lists 6.99 million affected people, with letters set to mail July 10, 2026. Maine's filing carried the same figure. That national scope dwarfs earlier state-by-state counts that totaled roughly 1.1 million in June filings.
TechCrunch framed the incident against a wider 2026 pattern of driver's license and ID document exposure—from Texas parks licensing to hotel check-in systems and prison payphone providers—amid governments pushing more age-verification laws that ask the public to upload identity documents online.
What was not disclosed
The notice did not break out every data category in public reporting, and AssuranceAmerica did not answer TechCrunch questions about ransom contact or payment. Treat unverified extortion chatter as unconfirmed unless the company or a regulator attests it.
Who is at risk
Anyone who applied for or held AssuranceAmerica auto insurance in affected states may receive a letter. Driver's license numbers plus policy details enable convincing fake insurer or DMV refund phishing and can be combined with other 2026 DL leaks for synthetic identity fraud.
Action items
- Watch for July 10 mail—do not dismiss envelopes from AssuranceAmerica or its vendors as junk.
- Freeze credit at Equifax, Experian, and TransUnion if the notice says your SSN or DL was exposed.
- Request your motor-vehicle record from your state DMV if your state offers activity alerts.
- Reject unsolicited "policy cancellation" or "claim payout" links—call your agent on a published number.
Canonical record
AssuranceAmerica 2026 breach on BreachHistory.
Sources: TechCrunch, AssuranceAmerica notification (DocumentCloud).