Risk Strategies Data Breach Exposes Social Security Numbers

Risk Strategies, officially known as RSC Insurance Brokerage Inc., disclosed a data breach involving sensitive personal and medical information.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on June 23, 2026, with 47 Massachusetts residents identified as affected. The total number of individuals affected nationwide has not been publicly disclosed.

According to the notification letter sent to affected individuals, Risk Strategies experienced a data security incident that involved certain personal information.

According to the notification letter, all affected individuals had their names and Social Security numbers exposed. For some individuals, the compromised information also included medical information, medical records and health, dental or vision insurance details.

Social Security numbers are among the most sensitive types of personal information because they can be used to open fraudulent accounts, file false tax returns or commit other forms of identity theft. Medical records and insurance details can also be misused for medical identity fraud, which occurs when someone uses another person's information to obtain healthcare services or submit false insurance claims.

Because this breach involved both financial and medical data, affected individuals should be especially vigilant in monitoring their accounts and records.

Risk Strategies' response

According to the company's notification letter, Risk Strategies stated, "We regret that this incident occurred." The company also said it has "taken steps to further strengthen our existing security measures."

Risk Strategies is offering affected individuals a complimentary 24-month membership to credit monitoring services provided by Epiq. The service, called Privacy Solutions ID 3B Credit Monitoring, can be activated at privacysolutionsid.com. Affected individuals received a unique activation code and enrollment deadline in their notification letter. According to the notification, enrolling in this service will not affect credit scores.

The monitoring service includes three-bureau credit monitoring with alerts for key changes such as credit inquiries, new accounts and public records. It also provides a monthly VantageScore 3.0 credit score with a score tracker. Social Security number monitoring tracks the use of SSNs across situations like loan applications, employment records, healthcare records, tax filings and payment platforms, sending real-time alerts when activity is detected.

The service includes dark web monitoring that scans servers, chat rooms and websites to detect fraudulent use of personal information. It also offers change of address monitoring through U.S. Postal Service records, credit freeze assistance and personal information protection tools that help users find and remove their exposed data from people search sites and data brokers.

Additionally, the service provides dedicated identity restoration specialists who can assist with identity theft recovery and lost wallet assistance, including help with canceling and reissuing credit and ID cards. The monitoring package includes up to $1 million in identity theft insurance with a $0 deductible to help cover expenses associated with recovering from identity theft. It also includes up to $1 million in unauthorized electronic funds transfer reimbursement to help recover stolen funds from fraudulent activity.

Affected individuals with questions about the incident can call Risk Strategies at 866-659-7098, Monday through Friday, from 9:00 a.m. to 9:00 p.m. EST. For help with the Epiq enrollment process, individuals can call 866-675-2006, Monday through Friday, from 9:00 a.m. to 5:30 p.m. ET.

The company was acquired by Brown & Brown on Aug. 1, 2025, and continues to operate under the Risk Strategies brand.