Hippo Analytics Inc., doing business as Hippo Insurance Services, reported a data security incident involving its online insurance-quote tool. According to filings submitted to state regulators, unauthorized actors exploited a vulnerability in the quote tool's pre-fill functionality between January 30, 2025, and August 11, 2026. Hippo discovered the potential incident on August 3, 2026, and concluded its investigation on October 9, 2026.
The compromised functionality retrieved information from third-party data provider Verisk. The data exposed in the incident included consumer names, dates of birth, and driver's license numbers. State regulatory filings confirmed that at least 38,518 residents in Texas and 5,132 residents in Massachusetts were affected, totaling 43,650 confirmed individuals across those jurisdictions. Social Security numbers, medical information, and financial account details were not reported as exposed.
Notices were submitted to regulators including the Attorneys General of California, Texas, and Massachusetts in late October 2026. As forensic investigations and regulatory filings conclude, additional details concerning the full scope and total number of affected individuals across all jurisdictions may develop over time.