United Underwriters Insurance Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / United Underwriters
Active investigation Data breach · Insurance Notices mailed Sep 21, 2026

Received a May 2026 breach notice from United Underwriters?

Dapeer Law, P.A. is investigating a potential class action against United Underwriters Insurance, a Provo, Utah insurance agency and Trucordia business, on behalf of customers whose personal information may have been exposed in the May 2026 cyber incident disclosed in September 2026.

Submit your claim → See what to do No fee unless we recover for you
Breach window
May 1, 2026
Certain files downloaded by an unauthorized actor
Notification delay
About 4.5 months
Files taken May 2026, notices Sep 2026
Credit monitoring
24 months
Through Cyberscout (TransUnion)
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from United Underwriters dated May 2026.
  • Your letter offered enrollment in 24 months of free credit monitoring and identity restoration through Cyberscout, a TransUnion company.
  • You had personal information held by United Underwriters in connection with insurance coverage, quotes, or other services it provided.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility →
Background

What happened

According to a sample notice letter filed with the California Attorney General, United Underwriters, a Trucordia business based in Provo, Utah, identified suspicious activity on its systems earlier in 2026. The company says it activated its incident response plan, stopped the unauthorized activity, and engaged third-party forensic specialists to investigate. That investigation found that an unauthorized actor downloaded certain files from its systems on May 1, 2026.

United Underwriters then conducted a programmatic and manual review of the downloaded files and determined that they contained personal information belonging to consumers. Notice letters dated September 21, 2026 began reaching affected individuals roughly four and a half months after the files were taken. The public sample letter does not list the specific data elements involved, and the total number of people affected has not been disclosed. Impacted individuals are being offered 24 months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company, with an enrollment deadline of December 31, 2026.

Insurance agencies routinely collect identifiers, contact details, driver and vehicle information, and in some cases financial or policy details to quote and service coverage. Files holding that kind of information may support identity theft or fraudulent insurance and financial activity. Notice recipients should review their individual letter for the categories of information involved in their case and watch insurance, bank, and credit card accounts for activity they do not recognize.

Unauthorized File Download Insurance Agency California Attorney General Cyberscout Monitoring Identity Theft Risk
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your letter contains the enrollment code for credit monitoring, may list the categories of information involved in your case, and is important evidence if you decide to participate in a lawsuit.

2

Enroll in the free 24-month credit monitoring

Enroll in the Cyberscout (TransUnion) monitoring offered in your letter at bfs.cyberscout.com/activate before the December 31, 2026 deadline. Accepting this benefit does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because the data was held by an insurance agency, also review policy statements, premium billing notices, and any claim or policy change confirmations for activity you do not recognize.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim →
Timeline

Breach timeline

Early 2026 Passed
Suspicious activity identified on United Underwriters systems
May 1, 2026 Passed
Unauthorized actor downloads certain files
September 21, 2026 Passed
Notice letters dated and sample filed with California Attorney General
December 31, 2026 Active
Deadline to enroll in Cyberscout credit monitoring
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, insurance fraud, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring United Underwriters to implement stronger data security practices going forward.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from United Underwriters. What should I do? +

Keep the letter, since it contains your enrollment code and may list the information involved in your case. Enroll in the free 24-month Cyberscout credit monitoring and identity restoration at bfs.cyberscout.com/activate before December 31, 2026. Then monitor your bank, credit card, and insurance statements along with your credit reports, and consider placing a fraud alert or security freeze with the three nationwide credit bureaus. Save records of any fraud and speak with a data breach attorney about your options.

Am I eligible to join a class action against United Underwriters? +

Individuals who received a data breach notification letter from United Underwriters are likely eligible to have their claims evaluated. Factors that affect a potential claim include your state of residence, the categories of data involved, and whether you experienced fraud, identity theft, lost time, or out-of-pocket losses. Eligibility to join a class action would be determined if and when a case is filed. A free consultation can help clarify where you stand.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

United Underwriters says the files downloaded on May 1, 2026 contained personal information, but the sample letter filed with the California Attorney General does not itemize the specific data elements. Check your own letter for details. Because the files belonged to an insurance agency, they may include identifiers, contact details, and policy or financial information.

Did United Underwriters offer free credit monitoring? +

Yes. United Underwriters is offering 24 months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company. You must enroll by December 31, 2026 using the activation code in your letter. Enrolling does not waive your right to pursue a legal claim.

How many people were affected by the United Underwriters breach? +

United Underwriters has not publicly disclosed the total number of affected individuals in its California Attorney General filing. This page will be updated as more information becomes available.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

A sample of the notice letter is posted on the California Attorney General's data breach notification portal and can be downloaded as a PDF from the link in the sources section. Dapeer Law can also help you obtain a copy during a free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with United Underwriters Insurance, Cyberscout, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with California Attorney General on September 21, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Previous
Previous

Ridgeway Pharmacy Data Breach Lawsuit Investigation

Next
Next

Office of the Los Angeles City Attorney Data Breach Lawsuit Investigation