AssuranceAmerica Data Breach 2026: 6.9 Million Driver's Licenses - What To Do

AssuranceAmerica, a US car and rental insurance provider, has confirmed a data breach affecting about 6.9 million people - the largest known spill of Americans' driver's license numbers this year. According to reporting by TechCrunch, attackers stole names, contact details and driver's license numbers. If you have had a policy with them, here is what it means and exactly what to do. For the general playbook, see our what to do after a data breach guide.

What happened

According to the breach notice reported by TechCrunch, AssuranceAmerica discovered hackers in its systems on 17 March 2026 and concluded its investigation on 15 June. The attackers targeted one of the company's employees, and AssuranceAmerica said it then disabled the compromised credentials.

What was taken: customers' names, contact information and driver's license numbers, plus details of their auto insurance policies, accounts, drivers, vehicles and claims. Founded in 1998, AssuranceAmerica serves customers across more than a dozen US states.

Why a driver's license number is worse than a password

Here is the part that makes this breach sting. A password is easy to fix: you change it. A driver's license number is not. It is a durable identifier tied to you for years, and you cannot rotate it.

Combined with your name and contact details, a leaked license number fuels identity theft, fraudulent accounts, and targeted scams that can surface long after the breach fades from the news. That is why the checklist below is about locking down your identity, not just your login.

What to do now

Work through this checklist, even before a letter arrives:

• Freeze your credit with the major bureaus. It is free and stops new accounts being opened in your name - the single most useful step here.
• Set up fraud alerts and take any free credit monitoring the company offers.
• Expect targeted phishing. Criminals now hold your real name and license number; be wary of any call, text or email about your insurance or an "account problem." Verify through official channels only.
• Change reused passwords and turn on two-factor authentication. A password manager gives every account a unique password so one leak cannot spread.

The credential lesson

There is a second, quieter lesson. The breach reportedly began by compromising an employee's credentials - not by breaking encryption. That is how a large share of breaches start: one stolen or phished login. The same defense that protects a company protects you: unique passwords, two-factor authentication, and phishing awareness shrink the odds that one compromised login opens the door.

The honest caveats

Two points keep this accurate. First, the figures and details come from AssuranceAmerica's notification and TechCrunch's reporting, not an independent audit. Second, the exposed data centres on driver's license numbers and contact details - serious for identity fraud, but the notice did not describe leaked passwords or full financial account credentials.

The honest takeaway: you cannot un-leak a license number, so the win is limiting what anyone can do with it. Freeze your credit, watch for fraud, and lock down your accounts with unique passwords plus 2FA. Those steps defend you here and against the next breach.