United Underwriters data breach: files downloaded from an insurance agency's systems

Who is United Underwriters?

The letter is headed United Underwriters Insurance and signed "United Underwriters, A Trucordia Business", over the address of Trucordia Insurance Services, LLC in Provo, Utah. Texas's record lists the entity under the name United Underwriters and was published on September 25, 2026. The letter does not say which insurers, policies or clients the files related to, or whether readers were policyholders, applicants or someone else.

What happened at United Underwriters?

The letter gives no date for the discovery, only that it came earlier in 2026. It says the agency identified suspicious activity on some of its systems, stopped it and started a forensic investigation with outside experts. That investigation found that an unauthorized actor had downloaded certain files. The agency then searched the files, by program and by hand, for personal information.

The records give two dates, about three weeks apart. California's record gives April 7, 2026 as the date of the breach, and Indiana's row gives the same. The letter says each reader's files were downloaded on May 1, 2026. Neither document says whether the actor was in the systems for the whole period between those dates. The letter does not say how the actor got in, and it names no group.

Date	What happened	Source
April 7, 2026	Breach date in California's and Indiana's records	California and Indiana records
May 1, 2026	Files with readers' information downloaded	Letter
September 21, 2026	Letter date; notice sent, per Indiana	Letter; Indiana record
September 25, 2026	Texas publishes the report	Texas record
December 31, 2026	Last day to enrol in Cyberscout monitoring	Letter

The letter is dated 143 days after the May 1 download and 167 days after the April 7 breach date. The guide to how long companies take to notify sets that against other letters in this log.

What information was in the United Underwriters breach?

The filed sample leaves the list blank. Where each reader's own data would appear, the sentence skips straight to the download date, so the public copy names nothing.

Texas's record fills the gap for the reports it received. It lists name, Social Security number, driver's licence number, government ID number such as a passport or state ID card, financial information such as account or card numbers, medical information, health insurance information and date of birth.

Data type	Listed by Texas
Name	Yes
Social Security number	Yes
Driver's licence number	Yes
Government ID (passport, state ID)	Yes
Financial account or card number	Yes
Medical information	Yes
Health insurance information	Yes
Date of birth	Yes

Texas lists the categories across all the Texans in the report, so any one letter may list fewer. Each letter as mailed lists that person's own items.

How many people were affected by the United Underwriters breach?

Indiana gives the only total: 109,868 people.

Record	People counted
Indiana attorney general, total	109,868
Texas residents	258
Indiana residents	11

Together, Indiana and Texas account for 269 of the 109,868. No record fetched for this entry says where the rest live. The ranking of 2026 breaches by people affected shows where the Indiana total falls.

What is United Underwriters offering?

Twenty-four months of credit monitoring and identity restoration through Cyberscout, a TransUnion company, at no charge. Enrolment is at bfs.cyberscout.com/activate with the activation code in the letter, and the deadline is December 31, 2026. The letter says the code will not work after that date.

Item	Detail from the letter
Provider	Cyberscout (TransUnion)
Length	24 months
Enrol by	December 31, 2026
Where	bfs.cyberscout.com/activate, with the code in the letter
Help line	1-888-940-7758, 7 a.m. to 7 p.m. CT, Monday to Friday

The monitoring is single-bureau, so it watches one credit file. The guide to credit-monitoring offers compares this offer with others in this log.

Was my information in the United Underwriters data breach?

If you received a letter from United Underwriters dated September 21, 2026, from a Cyberscout P.O. box in Suwanee, Georgia, your information was in the downloaded files. The call center is at 1-888-940-7758, 7 a.m. to 7 p.m. CT, Monday to Friday, excluding major U.S. holidays. The enrolment window is still open until December 31, 2026. The guide to bank, brokerage and mortgage breach notices covers how other financial firms in this log describe their incidents.

What the notice leaves open

• When the agency found the suspicious activity, and how the actor got in.
• Why the records give April 7 and the letter May 1.
• Which insurers' or clients' records the files held, and whether readers were policyholders.
• What each person lost; the sample leaves the list blank.