United Underwriters Insurance Data Breach Exposes PII

United Underwriters Insurance, a property-and-casualty insurance company based in Provo, Utah, disclosed a data breach that involved the unauthorized download of files from its systems.

The breach was reported to the California Attorney General on Sept. 21, 2026. The company mailed notification letters on Sept. 21, 2026.

Upon detecting suspicious activity on some of its systems, United Underwriters initiated its incident response processes to stop the unauthorized activity and launched a forensic investigation supported by third-party forensic experts.

The investigation determined that an unauthorized actor gained access to the company's systems and downloaded certain files. The data was downloaded by the unauthorized actor on May 1, 2026.

After confirming that the unauthorized actor had downloaded data, the company undertook a thorough review process.

The specific categories of personal information that were exposed have not been detailed in the company's public disclosure but may include names, addresses, contact information, Social Security numbers or financial account numbers.

United Underwriters Insurance's response to the breach

United Underwriters Insurance is offering 24 months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company.

To enroll in these complimentary services, affected individuals should visit the TransUnion enrollment page and enter the unique activation code included in their notification letter. The deadline to enroll is Dec. 31, 2026, and activation codes will not work after that date.

The company has also established a dedicated call center to answer questions about the cybersecurity event and the services being offered. Affected individuals can reach the call center by calling 1-888-940-7758. The call center is open from 7 a.m. to 7 p.m. CT, Monday through Friday, excluding major U.S. holidays.