Fiesta Insurance data breach: 160,151 people after a June 2025 incident, and a second notice in 2026

Why did the Fiesta Insurance notice take more than a year?

Fiesta says the time went into a forensic investigation and an extensive review of the data, to work out whether personal information had been accessed or taken. Insurance Business reported that the delay was in the file review, not a confirmed missed notification deadline, and that letters went out 17 days after Fiesta reached its finding. From the day Fiesta learned of the incident to the first letters took 399 days. The notice-delay guide puts that in context.

Fiesta has not said how the intruder got in, whether ransomware or extortion was involved, or which corporate or franchise systems were hit; Insurance Business lists those as open questions too.

Was there a second Fiesta Insurance breach?

Indiana's report has a second Fiesta Insurance notice: sent September 2, 2026, for a breach dated May 25, 2026, covering 48,092 people, 2 of them in Indiana. Texas published a second Fiesta report the next day for 4,032 Texans, listing name, address and Social Security number. Fiesta's website notice, dated July 13, 2026, does not mention it. No document fetched for this entry says whether the second notice is a separate incident or a later batch from the first.

What happened, and when?

Date	What happened	Source
June 9, 2025	Fiesta learns systems were affected	Fiesta notice; Indiana record
June 26, 2026	Review finds personal information in the files	Fiesta notice
July 13, 2026	Letters begin; Indiana notice (160,151)	Fiesta notice; Indiana record
July 14, 2026	Texas publishes the first report (12,097 Texans)	Texas record
May 25, 2026	Breach date of the second notice	Indiana record
September 2, 2026	Second notice (48,092)	Indiana record
September 3, 2026	Texas publishes the second report (4,032 Texans)	Texas record

What information was involved in the Fiesta Insurance breach?

For the first notice, Fiesta's website lists full names, addresses, Social Security numbers, dates of birth, passport numbers, financial account information, health-related financial information and driver's license numbers, varying by person. Fiesta says it has no indication of identity theft or fraud from the incident.

How many people were affected by the Fiesta Insurance breach?

160,151 people in the first notice and 48,092 in the second, by Indiana's count. They cannot simply be added, since one person may be in both.

Record	What it counts	Number
Indiana attorney general	First notice, people affected in total	160,151
Indiana attorney general	Second notice, people affected in total	48,092
Texas attorney general	First report, Texans	12,097
Texas attorney general	Second report, Texans	4,032
Indiana attorney general	First notice, Indiana residents	42
Indiana attorney general	Second notice, Indiana residents	2

Of the roughly 1,300 notices in Indiana's 2026 report, 52 give a larger total than Fiesta's first.

What is Fiesta offering people who got a letter?

Fiesta's website notice describes best-practice guidance for protecting information, and its response line, 844-959-7141, open Monday to Friday from 8:00 a.m. to 5:30 p.m. It does not describe free credit monitoring. The guide to credit monitoring offers lists the free steps anyone can take, such as a credit freeze.

Was my information in the Fiesta Insurance data breach?

If you got a letter from Fiesta Insurance Franchise Corporation from July 2026 on, your information was in the reviewed files. Customers of Fiesta Auto Insurance and Tax Services offices who did not get one can ask the response line above.

What the documents leave open

• How the intruder got in and which systems were affected.
• Whether the September 2026 notice is a second incident.
• Whether any letters offered credit monitoring.