United Underwriters Insurance Data Breach Exposes PII and PHI

Published
September 22, 2026
Updated
October 7, 2026
United Underwriters Insurance Data Breach Exposes PII and PHI
United Underwriters
Affected by the data breach? You may be entitled to compensation. Submit a claim today.

United Underwriters Insurance, a property-and-casualty insurance company based in Provo, Utah, disclosed a data breach that involved the unauthorized download of files from its systems.

The breach was reported to the attorneys general offices of California, Indiana, Massachusetts and Texas starting on Sept. 21, 2026. The company mailed notification letters on Sept. 21, 2026.

A total of 77,894 individuals were impacted.

Upon detecting suspicious activity on some of its systems, United Underwriters initiated its incident response processes to stop the unauthorized activity and launched a forensic investigation supported by third-party forensic experts.

The investigation determined that an unauthorized actor gained access to the company's systems and downloaded certain files. The data was downloaded by the unauthorized actor on May 1, 2026.

After confirming that the unauthorized actor had downloaded data, the company undertook a thorough review process.

The specific categories of information that were exposed may have included driver's licenses, government-issued ID numbers, Social Security numbers, financial account numbers, dates of birth, medical records and health insurance information.

United Underwriters Insurance's response to the breach

United Underwriters Insurance is offering 24 months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company.

To enroll in these complimentary services, affected individuals should visit the TransUnion enrollment page and enter the unique activation code included in their notification letter. The deadline to enroll is Dec. 31, 2026, and activation codes will not work after that date.

The company has also established a dedicated call center to answer questions about the cybersecurity event and the services being offered. Affected individuals can reach the call center by calling 1-888-940-7758. The call center is open from 7 a.m. to 7 p.m. CT, Monday through Friday, excluding major U.S. holidays.

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
United Underwriters
Consumers Notification date
Date of Breach
April 7, 2026
Breach Discovered Date
Total People Affected
77894
Information Types Exposed
  • Name of individual
  • Social Security Number Information
  • Driver’s License number
  • Government-issued ID number (e.g. passport, state ID card)
  • Financial Information (e.g. account number, credit or debit card number)
  • Medical
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image