AssuranceAmerica notified nearly 7 million people that a March 2026 intrusion exposed names, addresses, Social Security numbers, tax IDs, driver's license numbers, policy details, and claims histories. If you got a letter: enroll in the free 12 months of IDX monitoring with the code inside, freeze your credit at all three bureaus, and treat your license number as compromised for good.
What Happened in the AssuranceAmerica Data Breach?
AssuranceAmerica Managing General Agency is an Atlanta-based nonstandard auto insurance provider founded in 1998, writing policies through independent agents across more than a dozen states. According to the company's notifications and state attorney general filings:
- March 16, 2026: an attacker compromised the credentials of an AssuranceAmerica employee.
- March 17, 2026: the company detected suspicious activity in its network — one day after the intrusion.
- An unauthorized third party accessed portions of the IT environment and copied data files.
- June 15, 2026: the forensic review of which individuals were in those files was completed.
- July 10, 2026: notification letters began going out to 6,998,886 people, with filings submitted to state regulators including the Maine and Indiana attorneys general.
That total makes this the largest known exposure of Americans' driver's license numbers reported so far in 2026 — and the 115 days between detection and notification is itself now the subject of consumer litigation and regulatory attention.
What Data Was Exposed?
Per state attorney general filings, the copied files may include:
- Full name and mailing address
- Social Security number
- Driver's license number
- Tax identification number
- Insurance policy details and account information
- Claims history
Why a Driver's License Number Is Worse Than a Leaked Password
You can change a password in seconds. A driver's license number follows you until your state issues a new one — and most states will only reissue a new number if you can document that yours was used fraudulently. Combined with your name, address, SSN, and claims history, a license number is enough to open fraudulent insurance policies, file bogus claims, pass identity checks at a DMV counter, or hand your identity to someone during a traffic stop.
Are You Affected?
You are in scope if you held or applied for a policy administered by AssuranceAmerica — which is often sold under agency and partner brands rather than the AssuranceAmerica name, so check the underwriter listed on your policy documents, not just the agency you paid. Notification letters carry an enrollment code at the top. If you moved since your policy was active, the letter may never have reached you; contact the company at 100 Galleria Parkway SE, Suite 8000, Atlanta, GA 30339, or use the toll-free number on the notice, to ask whether you are on the notification list.
Step 1: Enroll in the Free Monitoring — But Do Not Stop There
AssuranceAmerica is offering affected individuals 12 months of complimentary credit monitoring and identity protection through IDX, redeemable with the enrollment code printed on the letter. Availability and duration vary by state. Enroll before the deadline stated in your notice; accepting the monitoring does not waive your right to bring a legal claim. Understand what it does, though: monitoring tells you after something happens. It does not prevent it.
Step 2: Freeze Your Credit at All Three Bureaus
A security freeze is free, is the single most effective control against new-account fraud, and takes about 15 minutes total:
- Equifax: equifax.com/personal/credit-report-services
- Experian: experian.com/freeze
- TransUnion: transunion.com/credit-freeze
Freeze every adult in your household who was on the policy, and freeze your children's credit too if their information was ever supplied. Thaw temporarily when you actually apply for credit.
Is your data already out there?
Leaked data ends up on broker sites and in scammers' hands. Run a free 60-second scan to see your exposure — then let us remove it.
Run a free scan★★★★★ 4.8/5 · Trusted by thousands of families
Step 3: Protect the Driver's License Number Specifically
- Contact your state DMV or motor vehicle agency and ask what fraud protections it offers — several states can flag a record, and some will issue a new license number with a police report or evidence of misuse.
- File a report at IdentityTheft.gov if you see any misuse. The FTC recovery plan it generates is the document DMVs, insurers, and courts ask for.
- Watch for insurance fraud: unexpected claim correspondence, a premium jump you cannot explain, or a policy you never bought. Ask your current insurer to note the breach on your file.
- Check your driving record once this year for tickets or accidents that are not yours.
Step 4: Lock Down Your Social Security Number
Create your my Social Security account at ssa.gov before someone else does, and use E-Verify Self Lock at myeverify.uscis.gov to block your SSN from being used for employment authorization by someone else. File your tax return as early as possible next season, and consider requesting an IRS Identity Protection PIN at irs.gov/ippin — tax-refund fraud is a standard follow-on to SSN and tax-ID exposure.
Step 5: Expect Breach-Themed Scams
Criminals read breach coverage too. Within weeks of a notification wave, victims start getting calls and emails that reference the exact breach by name, quote a real policy or claim detail, and offer "activation" of protection services. AssuranceAmerica will not call to ask for your SSN, banking details, or the enrollment code. Hang up and call the number on your own policy documents instead of any number a caller gives you.
Can You Join a Lawsuit?
Multiple firms opened investigations and filed proposed class actions after the July 2026 notifications. Enrolling in the free monitoring does not forfeit your claim. Keep your notification letter, note any fraud you experience, and log the hours you spend on calls and paperwork — documented time and out-of-pocket costs are what class members are typically asked to prove.
Step 6: Shrink What Attackers Can Combine It With
Stolen breach data is dangerous because it gets merged. Your license number becomes a workable identity when it is joined to a current address, phone number, relatives, and employer — and that context is sold openly by people-search sites, not stolen. Every hour your profile stays up on those sites, the AssuranceAmerica records are worth more to whoever bought them.
PrivacyOn removes your personal information from 100+ data brokers and people-search sites, monitors for relistings, and includes dark web monitoring so you learn when your exposed data surfaces in a new dump. Plans start at $8.33/month and cover up to 5 people, and the free exposure scan shows exactly where you are listed right now.
Frequently Asked Questions
How many people were affected by the AssuranceAmerica data breach?
AssuranceAmerica reported 6,998,886 affected individuals in state attorney general filings — nearly 7 million people. It is the largest known exposure of U.S. driver's license numbers disclosed so far in 2026.
Was my Social Security number exposed in the AssuranceAmerica breach?
State filings list Social Security numbers and tax IDs among the data elements involved, alongside driver's license numbers, addresses, policy details, and claims histories. Your notification letter specifies which elements applied to you, so read it and keep it.
When did the AssuranceAmerica breach happen and when were people told?
The intrusion occurred on March 16, 2026 and was detected on March 17. The file review finished on June 15, and notification letters began reaching affected individuals on July 10, 2026 — roughly 115 days after detection.
What free protection is AssuranceAmerica offering?
Twelve months of complimentary credit monitoring and identity protection through IDX, activated with the enrollment code on your letter, with availability varying by state. Enroll by the stated deadline. It is worth having, but monitoring is an alert service, not prevention — freeze your credit as well.
Can I get a new driver's license number after a breach?
Sometimes. Policies vary by state, and most agencies require evidence of actual misuse — typically a police report or an FTC IdentityTheft.gov report — before reissuing a new number. Call your state motor vehicle agency and ask what documentation it requires.
How do I stop my exposed data from being combined with public listings?
Remove yourself from the people-search sites that publish your current address, phone, relatives, and employer, and keep monitoring them, because brokers relist within months. PrivacyOn automates that across 100+ sites with continuous monitoring and dark web alerts, starting at $8.33/month.