--- title: "AssuranceAmerica quote API data incident" description: "AssuranceAmerica disclosed improper access through an insurance quote API; South Carolina recorded 22,952 affected residents." incident_type: "Data incident" status: "active" last_modified: "2026-10-18" canonical_url: "https://www.ally.security/incidents/assuranceamerica-quote-api-data-incident-2026" markdown_url: "https://www.ally.security/incidents/assuranceamerica-quote-api-data-incident-2026.md" stix_url: "https://www.ally.security/incidents/assuranceamerica-quote-api-data-incident-2026/stix.json" --- # AssuranceAmerica quote API data incident An August 2026 quote-system incident exposed personal information; South Carolina received the report on October 14. Last modified Oct 18, 2026 · 2 sources ## Summary - **Environment:** Insurance quote API used by business partners - **Operational impact:** Personal information obtained; no broader outage established - **Financial impact:** No incident cost established in the reviewed evidence ## What happened [AssuranceAmerica Managing General Agency](https://www.assuranceamerica.com/) detected suspicious requests to an insurance quote API on August 27, 2026. Its [notice](https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20AssuranceAmerica%20Managing%20General%20Agency,%20LLC.pdf) says the September 8 investigation finding established that information had been improperly obtained. [1](#source-1) ## Impact Potentially affected fields included names, driver’s license numbers, addresses, email addresses, phone numbers and birth dates. The company said it had no indication of misuse at notice time. [1](#source-1) The [South Carolina registry](https://consumer.sc.gov/index.php/identity-theft-unit/security-breach-notices) records **22,952 affected South Carolina residents**. This is a state-specific count, not a national total. [2](#source-2) ## Timeline ### August 27, 2026 — Suspicious requests detected The company detected unauthorized quote-system activity. [1](#source-1) ### September 8, 2026 — Information impact identified Investigators identified improperly obtained personal information. [1](#source-1) ### October 14, 2026 — State report received The regulator recorded the report and state resident count. [2](#source-2) ### October 18, 2026 — Briefing updated This briefing was last reviewed and updated on October 18, 2026. ## Threat Group & Attack Vector The activity involved one application programming interface endpoint that returned quotes to business partners. [1](#source-1) The reviewed notice does not establish the access start, credential misuse or a specific vulnerability. ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - No specific MITRE ATT\&CK technique is currently mapped for this case. ## Response AssuranceAmerica stopped the activity, blocked identified source addresses and engaged forensic investigators. It described the investigation as substantially complete, was reviewing security improvements and offered one year of credit monitoring. [1](#source-1) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### AssuranceAmerica August quote-system incident notice official · AssuranceAmerica Managing General Agency, LLC ### Security Breach Notices regulatory · South Carolina Department of Consumer Affairs
Evidence ledger Review the supporting structured claims. 1. **Affected Individual Count · 100% confidence · current** South Carolina residents reported by AssuranceAmerica: 22,952 individual 2. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: South Carolina report received 3. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: Suspicious quote requests detected 4. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: South Carolina residents reported by AssuranceAmerica 5. **Exposed Data Category · 100% confidence · current** Information improperly obtained through the quote system: Contact information 6. **Affected Organization · 100% confidence · current** AssuranceAmerica quote API data breach: AssuranceAmerica Managing General Agency, LLC 7. **Discovered At · 100% confidence · current** AssuranceAmerica quote API data breach: 2026-08-27 8. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: South Carolina’s regulator lists 22,952 affected South Carolina residents in the AssuranceAmerica report received 2026-10-14. 9. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: On September 8, its investigation identified personal information improperly obtained through the quote system. 10. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: AssuranceAmerica said it had no indication of misuse at notice time. 11. **Resulted In · 100% confidence · current** Personal-information finding: The investigation identified information improperly obtained through the quote system. 12. **Occurred At · 100% confidence · current** Suspicious quote requests detected: 2026-08-27 13. **Occurred At · 100% confidence · current** South Carolina report received: 2026-10-14 14. **Exposed Data Category · 100% confidence · current** Information improperly obtained through the quote system: Driver's license numbers 15. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: AssuranceAmerica stopped the unauthorized activity, blocked identified source addresses and engaged an external forensic investigator; it described the investigation as substantially complete. 16. **Resulted In · 100% confidence · current** Suspicious quote requests detected: AssuranceAmerica detected unauthorized activity involving its quote API. 17. **Exposed Data Category · 100% confidence · current** Information improperly obtained through the quote system: Dates of birth 18. **Occurred At · 100% confidence · current** Personal-information finding: 2026-09-08 19. **Exposed Data Category · 100% confidence · current** Information improperly obtained through the quote system: Names 20. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: Personal-information finding 21. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: Information improperly obtained through the quote system 22. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: AssuranceAmerica detected suspicious external requests involving a single API endpoint returning insurance quote information to business partners on August 27, 2026. 23. **Resulted In · 100% confidence · current** South Carolina report received: The regulator recorded AssuranceAmerica’s report and 22,952 affected South Carolina residents. 24. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: Potentially affected fields included names, driver’s license numbers, addresses, email addresses, telephone numbers and birth dates. 25. **Resulted In · 100% confidence · current** AssuranceAmerica quote API data breach: The company was reviewing security improvements and offered recipients one year of credit monitoring.