AssuranceAmerica, a U.S. car and rental insurance provider founded in 1998 that operates across more than a dozen states, confirmed a major data breach exposing the personal information and driver’s license numbers of approximately 6.9 million people. The company described it as the largest known spill of Americans’ driver’s license information so far in 2026. In a breach notice, AssuranceAmerica said it discovered hackers in its systems on March 17 and concluded its investigation on June 15, determining that names, contact information, driver’s license numbers, auto insurance policy and account details, driver and vehicle information, and claims data had been stolen.
The company did not detail the exact technical cause but stated that hackers “targeted one of the Company’s employees” and that compromised credentials were subsequently disabled. It is unclear whether the credentials were obtained via password-stealing malware or other means. TechCrunch contacted CEO Joe Skruck and founder Guy Millner with questions, including whether the company communicated with the hackers or paid a ransom; neither responded.
Filings with the Indiana and Maine attorney general offices listed the number of affected individuals at 6.99 million, with notification letters scheduled around July 10. The incident adds to a recent wave of breaches involving driver’s licenses and other identity documents, including a Texas parks and wildlife breach that exposed at least 3 million license and passport numbers, as well as earlier spills tied to hotel systems, money-transfer apps, prison payphones, and a U.K. visa service.
These breaches arrive as websites and apps increasingly require users to submit identity documents for age verification amid expanding government age-verification laws, raising the stakes of large-scale identity data exposure for fraud and impersonation.