Oxford Life Insurance Company Data Breach Affects 25,659 People

On April 18, 2025, Oxford Life Insurance Company discovered a significant data breach that affected several thousand individuals across multiple states. The incident occurred on February 20, 2025, and involved unauthorized access to sensitive consumer information.

According to official disclosures, the breach exposed a wide range of personally identifiable information (PII) and protected health information (PHI), including names, Social Security numbers, driver's license numbers, government-issued ID numbers (such as passport or state ID cards), financial account information (including account numbers and credit or debit card numbers), medical information, and health insurance information.

The breach impacted 25,659 Americans, including at least 3,280 individuals in Texas, 30 in Maine, and 300 in Massachusetts, with notifications also sent to affected residents in California and Vermont. The company notified consumers by U.S. Mail on May 13, 2025.

The scope and sensitivity of the exposed data make this breach particularly severe, as it includes both financial and health-related information that could be misused for identity theft, financial fraud, or medical identity theft.

Oxford Life reported the breach to the Maine Attorney General, Texas Attorney General, Massachusetts Attorney General, California Attorney General, Oregon Attorney General, and Vermont Attorney General between May 14 and May 15, 2025.

Oxford Life's response

Oxford Life Insurance Company responded to the breach by notifying affected individuals via U.S. Mail beginning May 13, 2025. While specific details about the company's mitigation steps and support resources were not disclosed in the public filings, it is standard practice for companies facing breaches of this magnitude to offer credit monitoring, identity theft protection, and guidance on how to monitor for suspicious activity.

If you received a notification from Oxford Life, it is important to:

• Carefully review the notice for instructions and available resources.
• Monitor your financial accounts and credit reports for unauthorized activity.
• Consider placing a fraud alert or credit freeze with major credit bureaus.
• Be vigilant for phishing attempts or suspicious communications referencing your insurance or medical information.

Given the inclusion of both PII and PHI in the breach, affected individuals should also monitor their health insurance statements and medical records for unfamiliar charges or services.

For more information, visit the Oxford Life Insurance Company website.