The Surplus Line Association of California experienced a data breach. The organization reported the incident to the California Attorney General around May 29, 2026, and to the Vermont Attorney General and Massachusetts Office of Consumer Affairs starting July 14, 2026.
The breach involved data types including Names, Social Security Numbers, Dates of Birth, Addresses, Government IDs, Medical Information, and Financial Information. Although a specific number of affected individuals has not been disclosed by the organization, notifications were sent to residents in California, Vermont, and Massachusetts. The nature of access and the discovery date have not been publicly revealed.
Additional details about the breach, including a confirmed total of affected individuals, may emerge as regulatory investigations proceed and the organization provides further updates. Affected individuals were advised they might be eligible for a class action lawsuit, but no specific lawsuit has been filed or listed.