On September 9, 2024, HPM Insurance (”HPM”) filed a notice of data breach with the Attorney General of Massachusetts after discovering that an unauthorized party was able to access a company email account. In this notice, HPM explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, HPM began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from HPM Insurance, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the HPM Insurance data breach. For more information, please see our recent piece on the topic here.

What Caused the HPM Insurance Data Breach?

The HPM Insurance data breach was only recently announced, and more information is expected in the near future. However, HPM’s filing with the Attorney General of Massachusetts provides some important information on what led up to the breach. According to this source, on October 27, 2023, HPM identified unusual activity within its email system. In response, HPM secured its email environment and then enlisted the help of outside cybersecurity experts to assist with the company’s investigation.

Through this investigation, HPM was able to determine that it was likely an unauthorized party gained access to files within the email account containing confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, HPM Insurance reviewed the compromised files to determine what information was leaked and which consumers were impacted. HPM completed this process on September 3, 2024, and while the breached information varies depending on the individual, the publicly available HPM data breach letter on the Massachusetts Attorney General’s website doesn’t mention what type of information was leaked. However, the personalized data breach letters that were sent out on September 9, 2024, should provide victims with a list of what information belonging to them was compromised.

More Information About HPM Insurance

HPM Insurance is an insurance company based out of Amherst, New Hampshire. HPM Insurance offers a wide range of personal and business insurance products, including industry-specific policies. HPM operates six offices throughout southern and northern New Hampshire, including in Amherst, Bedford, Goffstown, Laconia, and Bristol. HPM Insurance employs more than 25 people and generates approximately $6 million in annual revenue.