Beacon Mutual Insurance data breach: files copied January 7 to 14, 2026

What happened at Beacon Mutual?

Beacon Mutual learned of unauthorized activity on its network on January 14, 2026, the last day of the access. It contained the activity, began an investigation and reported the incident to law enforcement. The investigation found the intruder had been in some of its systems for a week and had taken copies of files. A review of those files then ran until April 16, 2026, when Beacon Mutual matched them to the people whose information they held. The letter does not say how the intruder got in, or whether ransomware was used.

Date	What happened	Source
January 7, 2026	Unauthorized access begins	Notice letter, California AG record
January 14, 2026	Beacon Mutual learns of the activity; access ends	Notice letter, California AG record
April 16, 2026	File review identifies the people involved	Notice letter
May 18, 2026	Letter date; logged in Massachusetts	Notice letter, Massachusetts list
May 19, 2026	Published by Texas	Texas AG list
August 31, 2026	Last day to enrol in Experian IdentityWorks	Notice letter

California's record gives January 7 to January 14, 2026 as the breach dates. The letters followed four months after the access ended. The guide to how long organizations take to notify compares that gap with other notices in this log.

How many people were affected?

Indiana's record gives the only total, 162,439 people. Three states count their own residents:

Record	People counted
Indiana attorney general, total	162,439
Massachusetts residents	11,890
Texas residents	612
Indiana residents	120

Massachusetts lists the report as received on May 18, 2026, from an insurance company. Texas published its report on May 19, 2026. The Massachusetts count places Beacon Mutual in our ranking of the state's 2026 breach reports, and the total in the ranking of 2026 breaches by people affected.

What information was in the copied files?

Neither filed copy of the letter says. In both, the data list is an unfilled merge field, "[Extra1 (DataElements)]". The state records give an outline, and they differ:

• Texas lists names, Social Security numbers, medical information and health insurance information.
• Massachusetts marks Social Security numbers, financial account numbers and driver's license numbers as breached, and medical records and card numbers as not breached.

Each state records only what applied to its own residents, and neither explains the difference. Each letter as mailed names that reader's own data. The guide to reading a California notice explains why filed copies carry fields like these.

What is Beacon Mutual offering?

A free Experian IdentityWorks membership, with credit monitoring, identity restoration and identity theft insurance. The California copy leaves the length as a field, "[Extra3]-year". The Massachusetts copy fills it in as two years. The activation code stopped working after August 31, 2026. Experian's identity restoration help does not need enrolment. The guide to credit-monitoring offers compares terms across letters.

Was my information in the Beacon Mutual data breach?

A letter from The Beacon Mutual Insurance Company dated May 18, 2026 means its review found your information in the copied files. Questions go to 833-918-8448, Monday to Friday, 9:00 a.m. to 9:00 p.m. Eastern Time, excluding major U.S. holidays.

What the notice leaves open

• How the intruder got in, and whether the files were encrypted or only copied.
• Whose records the files held: policyholders, claimants, employees or others. The letter does not say.
• Which data each reader lost; both filed copies leave the list blank.
• Where the rest of the 162,439 people live; only Indiana gives a total.