Farmers Insurance Data Breach
The 2025 Farmers Insurance data breach resulted from unauthorized access to a third-party service provider's database containing Farmers customer information. The Texas Attorney General's record reports that 1,071,300 people were affected.
Exposed Data Types
3- Names
- Dates of birth
- Driver's license numbers
About This Breach
The incident covered Farmers Insurance Exchange, Farmers Group, and affiliated entities. Customers of Farmers brands including Foremost and Bristol West were among the people notified.
How did the Farmers Insurance data breach happen?
The service provider detected and blocked an unauthorized person accessing its database on May 29, 2025. The provider alerted Farmers on May 30, and Farmers opened a forensic investigation and data review.
The investigation confirmed that the actor acquired certain information from the database on May 29. The initial-access method, the provider's name, and the actor's identity were not publicly disclosed.
What information may have been affected?
The official regulator record says the information may have included names, dates of birth, and driver's-license numbers. The categories varied by person; not every field was involved for every affected individual.
Farmers determined by July 24, 2025 which personal information was involved and whom it belonged to. Individual notices identified the categories relevant to each recipient.
How many people were affected?
The Texas Attorney General's current record reports 1,071,300 affected individuals, including 178,153 Texas residents. A smaller filing for Farmers New World Life represents an affiliate scope of the same dated incident and is not treated as a separate breach.
What risks can this information create?
Names, dates of birth, and driver's-license details can increase the risk of identity theft, fraudulent account applications, and attempts to bypass identity checks when combined.
Targeted messages claiming to concern an insurer, agent, or insurance claim may also appear more convincing. Accurate personal details in a message do not prove the sender is authorized by Farmers.
How did Farmers respond?
Farmers notified law enforcement, reviewed its integrations with the service provider, and assessed the provider's compliance with required security controls. Notification to affected people began on August 22, 2025.
The company offered affected people 24 months of complimentary identity monitoring. At the time of notice, Farmers said it was not aware of misuse of the information involved.
What should affected people do?
Notice recipients can monitor credit reports and financial accounts for unfamiliar activity. People whose driver's-license information was involved can review replacement and fraud-reporting options in their jurisdiction.
For an unexpected message claiming to come from Farmers or an agent, use the organization's official website or phone number before following a link. Do not share a password, payment detail, or verification code.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
