New York Attorney General Letitia James announced on October 14, 2025 that eight car insurance companies will pay $14.2 million and strengthen their cybersecurity after hackers exploited “pre-fill” quote tools and exposed driver’s license numbers and other data for more than 825,000 New Yorkers—information later used in some fraudulent unemployment claims. The settlements—with American Family/Midvale, Farmers, Hagerty, The Hartford, Infinity, Liberty Mutual, Metromile, and State Auto—require better authentication, monitoring, logging, data inventories, and incident response; affected New Yorkers were offered one year of free credit monitoring. Combined with earlier actions against four other insurers, AG James has now secured $20.79 million from 10 auto insurance companies for data security failures.
– New York Attorney General Letitia James today secured $14.2 million from eight car insurance companies for failing to protect the private information of more than 825,000 New Yorkers. The data breaches were part of a hacking campaign that targeted car insurance companies’ quoting tools and stole people’s personal information, including driver’s license numbers and dates of birth. The hackers later used some of the stolen driver’s license information to file fraudulent unemployment claims at the height of the COVID-19 pandemic.
An investigation by the Office of the Attorney General (OAG) and the New York State Department of Financial Services (DFS) concluded that the car insurance companies did not implement reasonable data security controls to protect consumers’ private information. Today’s settlements require all eight companies to pay penalties and significantly improve their data security. Affected New Yorkers were offered free credit report monitoring for one year. Attorney General James previously secured $6.5 million from four other car insurance companies for also failing to protect New Yorkers’ data. To date, Attorney General James has secured a total of $20.79 million from 10 auto insurance companies. Attorney General James encourages companies to follow guidance provided by her office to protect consumers’ personal data…