Farmers Insurance is facing negative attention and lawsuits because of a three-month delay in notifying 1.1 million policyholders about a data breach. H. Dennis Beaver, Esq writes:
To paraphrase the notice (you can read it in full here): On May 30, 2025, one of our vendors informed us about suspicious activity of an unauthorized actor who accessed our databases that contained customer information. We conducted a review to determine what personal information had been obtained.
But it wasn’t just the data breach that was so upsetting. Farmers, whose motto is “Fast, Fair and Friendly,” waited almost three months — until the very end of August — to tell their policyholders about the May breach (which involved its third-party vendor Salesforce).
Typically, insurance companies will notify policyholders within 30 to 60 days of a data breach, depending on state and federal laws. California and New York require notification within 30 days.
Read more at Kiplinger.
