Landmark Admin
Disclosed Jun 24, 20242 years ago1,613,773 affectedConfirmed
Ransomware at insurance administrator Landmark Admin encrypts and exfiltrates data
Texas-based third-party insurance administrator Landmark Admin detected suspicious activity on May 13, 2024; unauthorized access lasted until June 17, and data was encrypted and exfiltrated. Affected people were producers, policyowners, insureds and beneficiaries of carriers including Liberty Bankers Insurance Group.
What is known
| People affected | 1,613,773 (as reported by the organization) |
|---|---|
| Disclosed | Jun 24, 2024 |
| Discovered | May 13, 2024 |
| Happened | May 13, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Government IDs, Health, Insurance, Credentials and tokens, Other |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Landmark Adminoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Landmark Adminatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Landmark Adminattorneygeneral.delaware.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Landmark Adminattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Landmark Adminjustice.oregon.gov · Official notice | Official notice |
| California AG breach notice: Landmark Admin, LLCoag.ca.gov · Regulator | Regulator |
| Vermont Attorney General: 2024-10-23 Landmark Admin Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-06-27 Landmark Admin Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Landmark Adminin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Jun 24, 2024 | 6,647 |
| Vermont AGresidents of VT | Jun 27, 2024 | |
| California AGresidents of CA | Oct 23, 2024 | |
| Washington AGresidents of WA | Oct 23, 2024 | 4,795 |
| Delaware DOJresidents of DE | Oct 23, 2024 | 5,061 |
| Oregon DOJresidents of OR | Oct 23, 2024 | |
| Researchtotal | Oct 23, 2024 | |
| Vermont AGresidents of VT | Oct 23, 2024 | |
| Indiana AGresidents of IN | Oct 23, 2024 | 10,750 |
| California AGresidents of CA | Apr 11, 2025 | |
| Washington AGresidents of WA | Apr 11, 2025 | 11,691 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-06-27-landmark-admin-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-10-23-landmark-admin-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: finance to insurance · seed source
- 2026-09-25 · data_types: ["names","government-id","health","insurance","credentials"] to ["names","government-id","health","insurance","credentials","other"] · seed source
- 2026-09-25 · summary: empty to Texas-based third-party insurance administrator Landmark Admin detected suspicious activity on May 13, 2024; unauthorized access lasted until June 17, and data was encrypted and exfiltrated. Affected people were producers, policyowners, ins · seed source
- 2026-09-25 · title: empty to Ransomware at insurance administrator Landmark Admin encrypts and exfiltrates data · seed source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1613773 · backfill source
- 2026-09-25 · disclosed: 2024-10-23 to 2024-06-24 · backfill source
- 2026-09-25 · data_types: [] to ["names","government-id","health","insurance","credentials"] · backfill source
- 2026-09-25 · sector: other to finance · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-05-13 · backfill source
- 2026-09-25 · disclosed: 2025-04-11 to 2024-10-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.