Skip to content

Landmark Admin

Disclosed Jun 24, 20242 years ago1,613,773 affectedConfirmed

Official notice

Ransomware at insurance administrator Landmark Admin encrypts and exfiltrates data

Texas-based third-party insurance administrator Landmark Admin detected suspicious activity on May 13, 2024; unauthorized access lasted until June 17, and data was encrypted and exfiltrated. Affected people were producers, policyowners, insureds and beneficiaries of carriers including Liberty Bankers Insurance Group.

What is known

People affected1,613,773 (as reported by the organization)
DisclosedJun 24, 2024
DiscoveredMay 13, 2024
HappenedMay 13, 2024
AttackRansomware
Data exposedNames, Government IDs, Health, Insurance, Credentials and tokens, Other
SectorInsurance · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Landmark Adminoag.ca.gov · Official notice
Washington Attorney General breach notice: Landmark Adminatg.wa.gov · Official notice
Notice letter filed with the Delaware DOJ: Landmark Adminattorneygeneral.delaware.gov · Official notice
Notice letter filed with the Delaware DOJ: Landmark Adminattorneygeneral.delaware.gov · Official notice
Oregon DOJ breach notice: Landmark Adminjustice.oregon.gov · Official notice
California AG breach notice: Landmark Admin, LLCoag.ca.gov · Regulator
Vermont Attorney General: 2024-10-23 Landmark Admin Data Breach Notice to Consumersago.vermont.gov · Official notice
Vermont Attorney General: 2024-06-27 Landmark Admin Data Breach Notice to Consumersago.vermont.gov · Official notice
Indiana Attorney General 2024 data breach report: Landmark Adminin.gov · Official notice

Notices filed

WhereFiledPeople
Delaware DOJresidents of DEJun 24, 20246,647
Vermont AGresidents of VTJun 27, 2024
California AGresidents of CAOct 23, 2024
Washington AGresidents of WAOct 23, 20244,795
Delaware DOJresidents of DEOct 23, 20245,061
Oregon DOJresidents of OROct 23, 2024
ResearchtotalOct 23, 2024
Vermont AGresidents of VTOct 23, 2024
Indiana AGresidents of INOct 23, 202410,750
California AGresidents of CAApr 11, 2025
Washington AGresidents of WAApr 11, 202511,691
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdf · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-06-27-landmark-admin-data-breach-notice-consumers · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-10-23-landmark-admin-data-breach-notice-consumers · backfill source
  • 2026-09-25 · sector: finance to insurance · seed source
  • 2026-09-25 · data_types: ["names","government-id","health","insurance","credentials"] to ["names","government-id","health","insurance","credentials","other"] · seed source
  • 2026-09-25 · summary: empty to Texas-based third-party insurance administrator Landmark Admin detected suspicious activity on May 13, 2024; unauthorized access lasted until June 17, and data was encrypted and exfiltrated. Affected people were producers, policyowners, ins · seed source
  • 2026-09-25 · title: empty to Ransomware at insurance administrator Landmark Admin encrypts and exfiltrates data · seed source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 1613773 · backfill source
  • 2026-09-25 · disclosed: 2024-10-23 to 2024-06-24 · backfill source
  • 2026-09-25 · data_types: [] to ["names","government-id","health","insurance","credentials"] · backfill source
  • 2026-09-25 · sector: other to finance · backfill source
  • 2026-09-25 · attack: unknown to ransomware · backfill source
  • 2026-09-25 · discovered: empty to 2024-05-13 · backfill source
  • 2026-09-25 · disclosed: 2025-04-11 to 2024-10-23 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Landmark Admin

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.