In March 2026, Huffman Insurance Agency, an insurance agency operating in Virginia and Kentucky, reportedly suffered a ransomware attack by the Dragonforce group. The attack was discovered on March 4, 2026, with an estimated attack date of February 27, 2026.
The types of data exposed, the number of affected individuals, whether financial, medical, or SSN data were involved, and details of any official notifications remain unclear. The breach primarily affected the states of Virginia and Kentucky, where the company operates. This does not appear to be a vendor or third-party breach.
Breach details can emerge over time, and notifications may be delayed.