Fiesta Insurance Data Breach Compromises Social Security Numbers

Fiesta Insurance Franchise Corp., a privately held insurance and tax services franchisor headquartered in Las Vegas, disclosed a data breach involving sensitive personal information. The total number of individuals affected in the United States has not been disclosed, although 12,097 Texas residents and 34 Massachusetts residents were impacted.

The breach was also reported to the attorneys general of California and Vermont starting on July 13, 2026. Fiesta Insurance began notifying affected individuals on July 13, 2026. The company also posted a notice of the data security incident on its website.

On June 9, 2025, Fiesta Insurance learned that certain systems within its network environment had been affected by a cybersecurity incident. Upon learning of the issue, the company commenced an investigation to determine the full scope of the unauthorized activity.

Following the investigation and a data review, Fiesta Insurance determined on June 26, 2026, that files potentially accessed by the unauthorized party contained personal information. The forensic investigation and data review process lasted approximately one year.

The types of personally identifiable information exposed included full names, addresses, Social Security numbers, dates of birth, passport numbers, driver's license numbers, financial account information, health-related financial information and other government-issued identification numbers.

Fiesta Insurance's response to the breach

The company began sending notification letters to affected individuals approximately 13 months after the breach was first discovered.

For questions or additional information about the breach, Fiesta Insurance has set up a dedicated toll-free response line. Affected individuals and others with concerns can call 844-959-7141, Monday through Friday, from 8:00 a.m. to 5:30 p.m.