Incident

Illumifin Data Breach Exposes Social Security Numbers of Insurance Policyholders


Learn More

Illumifin Corp., a South Carolina-based insurance technology firm and third-party administrator, reports a data breach after discovering unauthorized network access on November 4, 2025. .

An attacker gained access to its network and stole copies of files stored on internal systems. The investigation found that the intruder accessed files containing information used for insurance administration, including policy processing and claims assessments.

The compromised data includes:

  • Social Security numbers
  • Full names
  • Home addresses
  • Insurance policy information
  • Underwriting and claims data

The nature of the attack and the total number of affected individuals is not disclosed. The company used a third-party forensic firm to investigate the breach and notified law enforcement. Illumifin notified its insurance carrier clients of the incident and provided lists of affected individuals. The company is offering one to two years of free identity monitoring services to those impacted. 

Affected policyholders should monitor their credit reports and check insurance statements for unauthorized claims. Experts recommend placing fraud alerts or credit freezes on credit files to stop criminals from opening new accounts.

Illumifin Data Breach Exposes Social Security Numbers of Insurance Policyholders