Velocity Risk Underwriters Data Breach Affects 41,270 People

A recent data breach involving Velocity Risk Underwriters' former third-party vendor, WaterStreet Company, has impacted at least 41,270 individuals across the United States.

The incident was first discovered by WaterStreet on March 17, 2025, when suspicious activity was detected in its environment. WaterStreet, which previously hosted certain data for Velocity Risk Underwriters, immediately shut down the affected systems and launched an investigation with the help of cybersecurity specialists.

The investigation determined that an unauthorized individual accessed WaterStreet’s data on March 17, 2025. WaterStreet undertook a comprehensive review of the compromised systems to identify which sensitive information was exposed and to whom it belonged.

On June 26, WaterStreet provided Velocity Risk Underwriters with data files identifying the affected business clients and individuals, as well as the types of information potentially compromised.

The breach exposed a range of personally identifiable information (PII), including names, financial account information, Social Security numbers and Tax Identification Numbers.

The breach affected 19 residents in Maine and 37 in New Hampshire, according to official filings. Nationwide, a total of 41,270 people were impacted.

The breach was disclosed to the Maine Attorney General’s office on July 25, 2025,8 and to the New Hampshire Attorney General’s office on July 24, 2025.

Consumers will reportedly be notified electronically on Aug. 6, 2025.

Velocity Risk Underwriters' and WaterStreet Company's response

Both Velocity Risk Underwriters and WaterStreet Company have taken several steps in response to this incident. Upon discovering the breach, WaterStreet immediately shut down the affected systems and began a thorough investigation with the help of cybersecurity experts to determine the scope and nature of the attack. They also worked to identify all individuals whose information may have been impacted.

As a precaution, WaterStreet is providing notice to affected individuals on behalf of Velocity Risk Underwriters. All impacted individuals are being offered twelve months of complimentary credit monitoring services.

The notification letters include instructions for enrolling in these services, as well as guidance on how to protect against identity theft and fraud. This includes information on placing fraud alerts and security freezes on credit files, contact details for the major credit bureaus, and tips for monitoring accounts and credit reports for suspicious activity.

For more information, visit the Velocity Risk Underwriters website.