Palomar Insurance Corp. experienced a major data breach. On Oct. 23, 2024, the insurance company became aware of unusual activity when a cybercriminal attempted to access the Palomar network without authorization. An investigation was launched and on May 1, 2025, and it was determined the cybercriminal may have accessed personally identifiable information (“PII”).
Compromised information may include names, dates of birth, driver's license numbers and expiration dates, Social Security numbers insurance policy numbers, insurance providers, login usernames and passwords. The breach is considered serious due to the sensitive nature of the data involved, including login and password information.
On June 17, 2025, Palomar finalized the list of affected individuals to notify. The insurance company disclosed the data breach to the Massachusetts Attorney General's office on July 24, 2025 and published a Notice of Data Incident on its website on the the same day.
In addition to required state and federal disclosures, Palomar Insurance is notifying individuals and offering free enrollment in identity monitoring and identity theft restoration services through Kroll.
If you receive a data breach notice from Palomar Insurance, you may want to:
For more information about the insurance company, check out the Palomar Insurance website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.