Integrated Specialty Coverages Data Breach

An insurance program administrator called Integrated Specialty Coverages (ISC) says a hacker downloaded files with people’s driver’s license numbers and financial information. Many people who got letters may never have dealt with ISC directly.

Integrated Specialty Coverages, LLC (“ISC”) is an insurance program administrator based in Carlsbad, California. It provides insurance products and underwriting services.

According to its notice letter, ISC detected suspicious automated access tied to a single account on a third-party cloud platform it uses for electronic document signing and management. ISC’s investigation found that an unauthorized third party accessed one ISC workspace on that platform between June 8, 2026 and June 11, 2026 and downloaded certain files.

ISC sent notice letters dated August 27, 2026 and reported the breach to the California and Massachusetts Attorneys General.

Why You May Have Received a Letter From a Company You Don’t Know

ISC works behind the scenes in the insurance industry. Its letter explains that people’s information may have reached ISC through their employer, an insurance company or broker during an insurance application, or as part of an insurance claim.

That means someone who applied for coverage, filed a claim, or works for a business insured through ISC could be affected without ever having contacted ISC.

What Information Was Exposed in the ISC Breach?

ISC’s sample letter leaves the data types as a blank field. State filings fill in the picture. According to the Texas and Massachusetts Attorney General records, the information involved includes:

• Name
• Address
• Date of birth
• Driver’s license number
• Financial account information
• Credit or debit card number

Each person’s letter should list their own information. ISC says it has no evidence so far that the information has been misused.

How Many People Were Affected?

ISC has not disclosed a national total. The state filings confirm at least:

• 1,836 Texas residents (Texas Attorney General)
• 188 Massachusetts residents (Massachusetts Attorney General)

ISC also filed with California, which is required when more than 500 California residents are affected. The true total is likely higher.

ISC says the incident was limited to the vendor’s environment and that its own internal network was not compromised. ISC took about 11 weeks after the access ended to send letters.

What Is ISC Offering Affected Individuals?

ISC is offering a free membership in Experian IdentityWorks credit and identity monitoring. The number of months and enrollment instructions are listed in each person’s letter. Experian Identity Restoration agents are also available to help if someone believes their information was misused.

Affected individuals can take these steps:

• Enroll in Experian IdentityWorks using the engagement number in the letter
• Watch bank and card statements, and ask your bank about a new card if card numbers were involved
• Place a free credit freeze with Equifax, Experian and TransUnion
• Be cautious of unexpected messages about insurance policies or claims

What Legal Options Do Affected Individuals Have?

Insurance companies and administrators that collect personal and financial information have a legal duty to protect it, including when they store it with outside vendors. When that duty is not met, affected individuals may have legal rights and remedies worth discussing with an attorney.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. 

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

Frequently Asked Questions

How many people were affected by the ISC data breach?

ISC has not said. State filings confirm at least 1,836 Texans and 188 Massachusetts residents, plus a California filing that points to more than 500 Californians.

What information was exposed?

According to state filings, the information includes:

• Name, address and date of birth
• Driver’s license number
• Financial account information
• Credit or debit card number

Why did ISC have my information?

ISC says it may have received your information from your employer, an insurance company or broker during an application, or as part of an insurance claim.

What should I do if I received a letter?

Take these steps:

• Enroll in Experian IdentityWorks
• Call your bank about any card listed in your letter
• Freeze your credit
• Keep your letter for your records

Could scammers use this breach to contact me?

Yes, that is a common follow-up risk. Scammers sometimes send emails, texts or calls that mention a real breach by name to seem trustworthy. Do not click links or share codes or passwords with anyone who contacts you about the breach. Use the phone number printed on your official letter instead.

Do I have a legal claim?

Possibly. Insurance companies and administrators that collect personal and financial information have a duty to protect it and to tell people promptly when it is exposed. If that duty was not met, you may have legal rights. Contact Emery | Reddy at 916.995.5968 or visit www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.