Farmers Insurance recently revealed that over one million of its customers may have had their personal information exposed in a data breach linked to a third-party vendor. The company alerted Maine’s Attorney General in a notification detailing the incident, which involves about 1,071,172 policyholders.
The issue came to light on May 30, 2025, when the vendor spotted suspicious activity on one of its databases containing Farmers customer data. Thanks to its monitoring tools, the vendor quickly blocked the unauthorized access. Farmers immediately launched a full investigation and involved law enforcement authorities to understand the incident better.
The investigation found that the breach actually happened on May 29. It confirmed that some data had been accessed by the unauthorized party. After reviewing the situation, Farmers identified that certain personal details were compromised. Those included customers’ names, addresses, birthdates, driver’s license numbers, and the last four digits of their Social Security numbers. The company noted no other types of personal data were exposed.
Farmers began sending letters to the people affected around August 22, 2025. To help protect those impacted, the insurer is offering free credit monitoring and credit reports for two years through the Cyberscout service.
This breach adds to a string of cybersecurity issues hitting U.S. insurance companies this year. In June, cybersecurity experts from Google’s Mandiant warned that a cybercrime group called Scattered Spider has been targeting the insurance sector. Other insurers like Erie and Philadelphia have also faced network problems recently. However, Erie stated that no data was compromised in its incident, and Philadelphia confirmed its outage was not due to ransomware.
Farmers’ latest data breach highlights ongoing risks in the insurance industry and the importance of vigilance when it comes to protecting customer information.