Landmark Admin confirms 1.6M impacted by data breach

The Landmark Admin data breach, originally reported to impact just over 800,000 individuals, has now been confirmed to have affected more than 1.6 million people across the United States.

The Texas-based third-party administrator, which provides policy accounting, regulatory reporting, and IT systems for major insurance providers such as Liberty Bankers Life and American Benefit Life, has updated its findings following a more extensive investigation.

Suspicious activity was first detected on Landmark’s network on 13 May 2024. Initial reports released in October 2024 estimated the number of affected individuals at around 806,000. However, a new filing with the Maine Attorney General’s office now reveals that the breach has impacted an estimated 1,613,773 people, with the final number still subject to change as forensic investigations continue.

Although the specific information compromised varies for each user, a large variety of sensitive personal data was exposed in the incident. Among the data potentially accessed are full names, home addresses, Social Security numbers, tax identification numbers, driver’s licence details, state-issued ID card numbers, passport numbers, financial account details, medical records, dates of birth, health insurance policy numbers, and life or annuity policy information. Landmark Admin has committed to sending personalised notification letters to all affected individuals, detailing exactly what information was exposed in each case.

 

The company is providing free identity theft protection and credit monitoring services for a full year to assist anybody affected by the Landmark Admin data breach.

 

Additionally, those who receive a notification letter will have access to a dedicated helpline for 90 days to ask questions or raise any concerns. Recipients are also being encouraged to monitor their credit reports and consider placing fraud alerts or security freezes on their accounts as precautionary measures.

The company stated that its review of affected systems is still ongoing and that it remains focused on identifying all impacted individuals and the specific types of data involved. As this process continues, more people may be notified, and the number of confirmed victims could rise again.

The Landmark Admin data breach serves as another reminder of the ongoing risks posed by cyberattacks targeting organisations that manage large volumes of personal and financial information.