Breachesby GlyphLandmark Admin
Disclosed Jun 24, 20241,613,773 affectedConfirmed
Ransomware at insurance administrator Landmark Admin encrypts and exfiltrates data
Texas-based third-party insurance administrator Landmark Admin detected suspicious activity on May 13, 2024; unauthorized access lasted until June 17, and data was encrypted and exfiltrated. Affected people were producers, policyowners, insureds and beneficiaries of carriers including Liberty Bankers Insurance Group.
What is known
| People affected | 1,613,773 (as reported by the organization) |
|---|---|
| Disclosed | Jun 24, 2024 |
| Discovered | May 13, 2024 |
| Happened | May 13, 2024 |
| Attack | Ransomware |
| Data exposed | NamesGovernment IDsHealthInsuranceCredentials and tokensOther |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Landmark AdminWashington Attorney General breach notice: Landmark AdminNotice letter filed with the Delaware DOJ: Landmark AdminNotice letter filed with the Delaware DOJ: Landmark AdminOregon DOJ breach notice: Landmark AdminCalifornia AG breach notice: Landmark Admin, LLCVermont Attorney General: 2024-10-23 Landmark Admin Data Breach Notice to ConsumersVermont Attorney General: 2024-06-27 Landmark Admin Data Breach Notice to ConsumersIndiana Attorney General 2024 data breach report: Landmark Admin
Notices filed
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdfby backfillSource
empty to https://ago.vermont.gov/document/2024-06-27-landmark-admin-data-breach-notice-consumersby backfillSource
empty to https://ago.vermont.gov/document/2024-10-23-landmark-admin-data-breach-notice-consumersby backfillSource
finance to insuranceby seedSource
["names","government-id","health","insurance","credentials"] to ["names","government-id","health","insurance","credentials","other"]by seedSource
empty to Texas-based third-party insurance administrator Landmark Admin detected suspicious activity on May 13, 2024; unauthorized access lasted until June 17, and data was encrypted and exfiltrated. Affected people were producers, policyowners, insby seedSource
empty to Ransomware at insurance administrator Landmark Admin encrypts and exfiltrates databy seedSource
empty to organizationby backfillSource
empty to 1613773by backfillSource
2024-10-23 to 2024-06-24by backfillSource
[] to ["names","government-id","health","insurance","credentials"]by backfillSource
other to financeby backfillSource
unknown to ransomwareby backfillSource
empty to 2024-05-13by backfillSource
2025-04-11 to 2024-10-23by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.