← Latest breaches

CONFIRMED · Insurance customers · BREACH TRACKER / BREACHES · Published · Last reviewed ·

United Underwriters: files downloaded in May incident, notices sent in September

An unauthorised actor downloaded certain files from United Underwriters' systems on May 1, 2026, and notification letters were mailed starting September 21, 2026.

What happened

United Underwriters (UUI), an insurance underwriting and claims business, said an unauthorised actor downloaded certain files from its systems on May 1, 2026. After a forensic investigation and a review of the files, it mailed notification letters starting September 21, 2026 and posted a substitute notice for people it could not reach by mail.

Who is affected

It varies by person, but may include name and date of birth, birth or marriage certificates, Social Security numbers, government-issued identification numbers, financial and payment card account numbers, health information, or account credentials.

How serious

That mix creates a concrete risk of identity fraud, fraudulent use of financial and payment card accounts, and account takeover where account credentials were included: the files can include Social Security numbers, government-issued identification numbers, dates of birth, financial and payment card account numbers, health information, or account credentials.

What to do now

UUI is offering affected people 24 months of complimentary TransUnion credit monitoring and identity restoration — enrol using the details in your letter. Review account statements and credit reports for anything you do not recognise.

Source: United Underwriters notice of data breach