Farmers Insurance says 1 million customers affected by cyberattack on third-party vendor

Farmers Insurance disclosed that a third-party vendor suffered a data breach that exposed personal information for 1,071,172 customers, including names, dates of birth, driver’s license numbers and the last four digits of Social Security numbers; the vendor detected and contained the incident, victims are being offered two years of identity theft protection, and the company has filed regulatory breach notices while not naming the affected vendor. The report places the incident in the context of a recent wave of attacks against insurers, with some industry incidents attributed by firms to the Scattered Spider criminal group, though this specific breach lacks confirmed attribution.