Farmers Insurance has confirmed a significant data breach after a third-party cyberattack exposed the personal information of more than 1 million policyholders. The incident, believed to be connected to the recent wave of Salesforce-related breaches, was triggered by a vishing scam that allowed attackers to gain unauthorized access to sensitive records.

Timeline of the Incident

The company stated it became aware of the breach on May 30, when a third-party vendor detected suspicious activity within its systems. Farmers quickly engaged external cybersecurity experts to investigate the issue. On August 22, the insurer began notifying affected customers directly about the breach.

Data Exposed

According to the company, the compromised information includes:

• Full names
• Addresses
• Dates of birth
• Driver’s license numbers
• In some cases, the last four digits of Social Security numbers

Approximately 1,111,386 individuals were impacted across 10 U.S. states, including California, Washington D.C., Iowa, Maryland, Massachusetts, New York, New Mexico, North Carolina, Oregon, and Rhode Island.

Company Response

In a statement to Mashable, a Farmers Insurance spokesperson emphasized:

“Protecting our customers’ information is our top priority. We discovered that an unauthorized third party briefly accessed a vendor’s system containing limited customer information. Importantly, our own systems were not compromised.”

The investigation, conducted with both internal and external experts, found no evidence that the exposed data has been misused. Farmers Insurance is providing impacted customers with support resources, including complimentary credit monitoring services.

Wider Context

Farmers Insurance, part of the Zurich Insurance Group, reported $2.2 billion in profits last year. Zurich, one of the world’s largest insurers, posted $7.8 billion in operating profit in 2024.

Industry sources, including Bleeping Computer, report that this incident is tied to the broader Salesforce data theft campaign that has affected numerous organizations in 2025, exposing sensitive data across multiple industries.

Source: https://mashable.com/article/farmers-insurance-data-breach-disclosure-what-states-affected