Pathfinder LL&D Insurance Group, an independent insurance agency based in Houston, experienced a data breach. The incident initially came to light when the PLAY ransomware group claimed to have compromised their systems on September 15, 2025. The company disclosed the breach to the Texas Attorney General on April 29, 2026.
The breach may have affected between 7,382 and 10,542 individuals, with 7,382 confirmed Texas residents impacted. The compromised data included a wide range of sensitive information, such as names, Social Security Numbers, dates of birth, addresses, government IDs, financial information (account, credit, and debit card numbers), medical information, health insurance information, and various client and internal business documents like payroll records and tax data. While the company operates in multiple states, the full nationwide impact has not been publicly reported, and specific states beyond Texas remain undisclosed. Details regarding when the incident occurred and how it happened are not publicly accessible.
Data breaches often involve an ongoing investigation, and the full extent of the incident may take time to be confirmed. Companies may also delay notifications as they manage the incident's aftermath.