Estrella Insurance Data Breach Affects 16,379 People

On January 22, 2025, Estrella Franchising, LLC, commonly known as Estrella Insurance, experienced a significant data breach due to a ransomware attack. This breach potentially impacted the personal information of 16,379 individuals across the United States, including 61 residents of Maine.

The breach was detected the same day it occurred, but the full extent of the compromised data was not uncovered until February 1, 2025.

The attackers accessed sensitive consumer information, which varied among individuals but generally included names, social security numbers, drivers' license numbers, and online account credentials.

The breach's severity is underscored by the exposure of such critical personal data, which can be used for identity theft and other fraudulent activities.

Estrella Insurance promptly responded by resetting passwords, restoring files from backup data, and enhancing security safeguards. They also engaged external legal and forensic experts to assist in the investigation and notified law enforcement to aid in their inquiry.

Estrella Insurance's Response

In response to the breach, Estrella Insurance took immediate action to mitigate the impact. The company reset passwords and restored files from backup data. They also enhanced their security safeguards and retained outside legal and forensic experts to assist with the investigation. Furthermore, Estrella notified law enforcement and is cooperating with their ongoing investigation.

To support those affected, Estrella has partnered with Experian to offer 24 months of identity protection services at no cost. These services include an Experian credit report at signup, credit monitoring, Experian IdentityWorks ExtendCARE, a $1,000,000 insurance reimbursement policy, and identity restoration. Affected individuals are encouraged to enroll in these services to help protect their identity and monitor for any signs of fraud.

For more detailed information about the breach, you can review the disclosures on the websites of the Maine Attorney General, the Texas Attorney General, and the Massachusetts Attorney General.