Goosehead Insurance Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Goosehead Insurance Agency, LLC data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Goosehead Insurance Agency
Goosehead Insurance Agency is a national insurance agency founded in 2003 by Robyn and Mark Jones. Headquartered in Westlake, Texas, the company has grown to serve clients across all 50 states. Goosehead works with a network of over 2,000 licensed agents, offering a wide range of insurance products including home, auto and flood insurance.
What Happened?
In March 2025, Goosehead Insurance Agency discovered a significant cybersecurity incident. On March 13, 2025, the company became aware that certain files on its systems, servers and workstations had been encrypted. An internal investigation revealed that between March 6 and March 13, 2025, an unauthorized actor accessed Goosehead’s systems and downloaded sensitive files.
It was later revealed that a ransomware group known as CHAOS claimed responsibility for the attack and posted about it on the dark web on March 31, 2025, stating they had obtained 300 GB of company data.
Information Exposed:
- Names
- Social Security numbers
- Driver’s license numbers
- State identification numbers
- Financial account information
Goosehead notified affected individuals by written notice on Oct. 10, 2025. The breach was also reported to the Maine Attorney General’s office, with five Maine residents confirmed to be affected.
Your Rights and Next Steps
If you received a notice from Goosehead Insurance Agency, your personal information may be at risk. Even if you have not yet experienced fraud or identity theft, it is important to take steps to protect yourself. Goosehead has provided guidance on how to monitor accounts, place fraud alerts and freeze credit reports.
Here’s what you can do now:
- Review your credit reports from Equifax, Experian and TransUnion
- Consider placing a fraud alert or a credit freeze on your credit file to prevent unauthorized activity
- Monitor your bank and credit card statements for suspicious transactions
- Report any suspected identity theft to law enforcement and your state Attorney General’s office
Lawyers are ready to help individuals affected by this breach understand their rights. If your information was exposed, you may have legal options and could be eligible for compensation.
You May Be Entitled to Compensation
If you were notified that your personal information was involved in the Goosehead Insurance Agency, LLC data breach, you may be entitled to compensation for any harm or inconvenience you have experienced. Lawyers are currently investigating potential claims against Goosehead on behalf of affected consumers.
To find out if you qualify to join a lawsuit or to learn more about your rights, complete the below form. Lawyers are ready to help you take the next steps.