AGIA Data Breach: Social Security Numbers Compromised

A.G.I.A. LLC, a U.S. insurance program administrator and marketing firm also known as AGIA Affinity, disclosed a data breach involving personal information that was maintained on its behalf by Doxa Insurance Holdings LLC.

Doxa Insurance Holdings was the victim of a cybersecurity incident that impacted data it maintains about individuals in its electronic systems on behalf of A.G.I.A.

A.G.I.A. operates as a third-party administrator in the insurance industry, working with partners and service providers to administer insurance and benefit programs for its association and membership organization clients. Doxa held personal data about individuals in connection with those programs.

When Doxa's systems were compromised, the personal information of individuals associated with A.G.I.A. LLC was exposed. The types of personal information exposed in the incident included Social Security numbers and driver's license numbers.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Aug. 3, 2026. Doxa mailed notification letters to affected A.G.I.A. customers on July 27, 2026.

A.G.I.A.'s response to the breach

Doxa is offering affected individuals 24 months of complimentary identity theft protection and credit monitoring services. These services are provided through Cyberscout and Identity Force, a TransUnion company.

To enroll, affected individuals can visit the Cyberscout activation page and enter the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Doxa also set up a dedicated help line at 1-833-851-9219 for individuals who have questions about the incident. Representatives are available Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding holidays. The help line will remain active for 90 days from the date of the notification letter.