TransGlobal Insurance Agency data breach: 71,597 people after a February 2026 cyberattack

What happened in the TransGlobal Insurance breach?

The letter calls it a cyberattack and gives two dates: the agency discovered on February 24, 2026 that personal information may have been accessed or taken by one or more unauthorized actors, and its investigation found the incident happened on or around February 18. It says the agency worked with its IT team and outside forensic experts, reported the incident to the FBI, and that the notice was not delayed at law enforcement's request. The letter does not say how the attackers got in or whether it was ransomware.

Date (2026)	What happened	Source
On or around February 18	Incident occurs; breach date in Indiana's record and the July California notice	Letter; Indiana report; California list
February 19	Breach date in the April California notice	California list
February 24	Agency discovers the data may have been accessed or taken	Letter
April 16	Notice sent, per Indiana	Indiana report
April 29	First notice recorded by California	California list
July 20	Second notice recorded by California	California list

The notice Indiana records went out 51 days after the agency found the problem; the notice-delay guide shows how that compares.

Why are there two TransGlobal notices?

California's list shows two TransGlobal Insurance Agency entries: one with a breach date of February 19, 2026 reported on April 29, and one with a breach date of February 18 reported on July 20. The sample letters filed with the two notices have the same text. Neither filing says why there are two, and Indiana's report has a single row.

What information was exposed?

The letter lists name, address, Social Security number, driver's license number and date of birth. The agency's response to it is a credit monitoring offer. For how insurance and other financial firms describe breaches like this, see the bank, brokerage and mortgage notice guide.

What is TransGlobal offering people who got a letter?

Twelve months of complimentary credit monitoring, plus fraud consultation and identity theft restoration. Enrollment is by phone: the letter asks people to call 888-524-8816 for instructions. The same line takes questions Monday to Friday, 9:00 a.m. to 5:45 p.m. Pacific time, and the letter also gives privacy@transglobalus.com. It is signed by the privacy team of TransGlobal Holding Company. A free credit freeze with the three bureaus is open to anyone and does not depend on the offer; the guide to credit monitoring offers explains the difference.

How many Texans were affected?

Texas's attorney general lists a report from TransGlobal Insurance Agency, posted on May 6, 2026, with 4,425 Texans affected. The Texas record lists names, addresses, Social Security numbers, driver's license numbers and dates of birth among the information involved. The Texas ranking lists 2026's largest reports. The figure counts Texans only.

How many Washingtonians were affected by the TransGlobal breach?

Washington's attorney general lists a notice from TransGlobal Insurance Agency, reported on May 5, 2026, with a breach date of February 19, 2026 and 1,880 Washingtonians affected. The record lists names, Social Security numbers, driver's license or state ID numbers, full dates of birth and other information as the information compromised. The Washington ranking compares 2026's notices. The figure counts Washington residents only.

What the record leaves open

• How the attackers got into the agency's systems, and whether it was ransomware.
• Why California has two notices and why their breach dates differ by a day.
• Whether customers, policyholders or employees make up the 71,597.