Alamo Insurance Group reports data breach caused by compromised email account

Alamo Insurance Group, headquartered in Secaucus, New Jersey, is reporting a data breach incident caused by unauthorized access to an employee's email account. Alamo Insurance Group offers a variety of insurance services, ranging from personal insurance to environmental risk management, property and casualty risk insurance, alongside HR consulting, and benefits administration.

The incident was discovered on January 9th, 2024, following the identification of suspicious activity. Immediate steps were taken, involving Alamo's IT provider to secure the compromised account and engaging third-party data security experts to thoroughly investigate the breach's extent and impact.

The investigation attributed the breach to an email phishing attack, compromising a particular employee's email account that held confidential consumer information. Sensitive data of customers were exposed including:

• names,
• Social Security numbers,
• dates of birth, became.

The number of affected individuals is not disclosed.

On March 12th, 2024, Alamo Insurance had commenced the process of notifying impacted individuals through data breach notification letters.