2024 Discovery Insure — impersonator breach, 20 clients
Data compromised
Addresses, ID numbers, policy coverage
Technical writeup
Impersonator called call center with data from prior breaches (credit bureaus, messaging) to pass verification. Obtained policy schedules for 20 clients. Residential addresses, ID numbers, policy details exposed.
Root cause
Social engineering; impersonation using prior breach data