Data Breach

CRC Insurance Services Data Breach Investigation

If you were affected by the CRC Insurance Services, LLC data breach, you may be entitled to compensation.
Updated on
Published on
CRC Insurance Services Data Breach Investigation
CRC Insurance Services Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the CRC Insurance Services, LLC data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About CRC Insurance Services

CRC Insurance Services, LLC is a major wholesale insurance broker based in Birmingham, Alabama, and is part of CRC Group, one of North America’s larger specialty insurance distributors. The company provides insurance solutions across a range of commercial lines, including property, casualty and professional liability.

The company operates as a full-service wholesale broker, managing general agent and Lloyd’s correspondent. With a national presence and over 5,500 professionals in its parent group, CRC Insurance Services is known for handling complex risks in industries such as transportation, construction, hospitality, manufacturing, oil and gas, and more. CRC Group places over $30 billion in annual premium and partners with more than 650 carriers.

What happened?

On Feb. 19, 2025, CRC Insurance Services learned of potential unauthorized access to data on its computer systems. After discovering the incident, the company began an investigation with the help of a third-party cyber forensic expert and notified law enforcement.

The investigation found that, on Feb. 3, 2025, data was accessed and acquired without authorization from a file server used by employees in one of CRC’s local offices.

The breach affected individuals in several states, with 1,701 people impacted in Texas, 175 in Massachusetts and 33 in New Hampshire.

Types of information exposed:

  • Name
  • Address
  • Social Security number
  • Driver’s license number
  • Credit or debit card numbers
  • Financial account information
  • Medical records and medical information
  • Date of birth
  • Other personally identifiable information

Your Rights and Next Steps

If you received a notice from CRC Insurance Services about this data breach, it means your personal information may have been compromised. Even if you have not noticed any suspicious activity, it is important to remain vigilant.

Steps you can take:

  • Review your credit reports, bank accounts and other financial statements for any unusual or unauthorized activity.
  • Take advantage of the free identity monitoring services offered by CRC Insurance Services through Kroll. This includes credit monitoring, fraud consultation and identity theft restoration.
  • Consider placing a fraud alert or security freeze on your credit file to help prevent new accounts from being opened in your name.
  • Report any suspected identity theft to law enforcement, the Federal Trade Commission or your state attorney general’s office.
  • Stay alert for further communications from CRC Insurance Services or Kroll regarding the breach and your options.

Lawyers are ready to help individuals affected by this breach understand their rights and pursue possible compensation. If you believe your information was exposed, you may have legal options.

You May Be Entitled to Compensation

If your personal information was compromised in the CRC Insurance Services data breach, you may be entitled to compensation for damages such as lost time, emotional distress or costs related to identity theft protection. Lawyers are actively investigating claims and are available to help you take the next steps.

To find out if you qualify to join a lawsuit or to get more information, complete the below form. Lawyers are standing by to review your situation and help you protect your rights.

Sources

Submit Your Claim