Doxa Insurance Holdings, a specialty insurance platform based in Fort Wayne, Indiana, experienced a cybersecurity incident that impacted data in its electronic systems. The breach was reported to the Massachusetts Attorney General’s office on August 3, 2026, and to the Vermont Attorney General’s office on July 27, 2026. Doxa reportedly began mailing breach notices to affected individuals on July 27, 2026. The exposed data explicitly included Social Security numbers, driver’s license numbers, and other government-issued ID numbers. Additional reported categories include name, date of birth, address, policy number, financial account information, and contact information. The overall U.S. total of affected individuals has not been publicly disclosed, but approximately 4 Vermont residents were affected according to a Vermont AG filing. Details can emerge later, and notices to individuals may be delayed depending on the ongoing investigation.