The security failure originated on March 16, 2026, when unauthorized actors utilized stolen credentials to infiltrate the Atlanta-based insurer’s IT environment. After discovering suspicious activity the following day, the company initiated a review that spanned three months, ultimately confirming the compromise of approximately 6.9 million records. The exposed cache includes names, contact details, insurance policy information, and vehicle data, with reports suggesting that driver’s license numbers and, in some instances, Social Security and Tax ID numbers were also accessed.

Law firm Edelson Lechtzin LLP is now evaluating potential class action claims on behalf of those affected. While the company began issuing notifications to victims around July 10, 2026, the firm is offering free case evaluations to assist individuals in assessing their legal options. Impacted policyholders are encouraged to monitor their financial accounts closely and consider credit monitoring services as they await further updates regarding the scope of the exposure.