American Contractors Insurance Group, commonly known as ACIG, is a Bermuda-based insurance and risk management company that provides coverage to construction companies across the country. Reports of a possible cyberattack against the company surfaced in mid-August 2026 after a hacker group claimed to have breached its systems.
As an insurer that handles sensitive personal and business information belonging to its member companies and their employees, ACIG has a responsibility to protect that data from unauthorized access. Any confirmed breach could put a substantial amount of personal information at risk.
ACIG’s Data Breach Investigation
Attorneys are investigating a possible data breach involving American Contractors Insurance Group (ACIG), an insurance and risk management firm that provides coverage to companies in the construction industry. ACIG was originally formed in 1981 by a group of construction companies and has since grown into a nationwide risk-retention group serving contractor members across the country.
According to an August 19, 2026 post on the dark web monitoring platform Ransomware.live, a hacker group calling itself Storm claimed responsibility for an attack on ACIG, reportedly estimated to have occurred on August 16, 2026. A separate cybersecurity blog, HookPhish, similarly reported that the Storm ransomware group claimed responsibility for the incident.
As of this writing, ACIG has not issued a public statement confirming the scope or nature of the incident, and no official breach notification has been filed. Claims made by ransomware groups on dark web forums are not independently verified and should be treated as unconfirmed reports until the company or a regulator formally confirms the incident.
Because ACIG provides insurance and risk management services to construction companies nationwide, a confirmed breach could implicate sensitive information belonging to current and former employees, as well as insured contractors and their personnel. Data breach attorneys are gathering information from anyone who believes their information may have been affected in order to evaluate potential legal claims against the company.
Individuals who are current or former ACIG employees, or who work for one of ACIG’s insured contractor members and are concerned their information may have been exposed, are encouraged to stay alert for an official notification and to monitor their accounts in the meantime.
When Did This Breach Occur?
The hacker group claiming responsibility for the incident, Storm, reportedly estimated the attack occurred on or around August 16, 2026, according to an August 19, 2026 post on the dark web monitoring platform Ransomware.live. ACIG has not yet issued an official notification confirming a breach date, and this timeline remains unconfirmed.
What Information Was Breached?
At this time, the specific categories of information involved have not been publicly confirmed. The exact types of personal information potentially affected remain unknown pending official confirmation from American Contractors Insurance Group.
What You Can Do
While ACIG has not yet confirmed a data breach, individuals connected to the company can take proactive steps to protect themselves:
- Watch for any official notification from ACIG and read it carefully if received.
- Monitor your financial accounts and credit reports for unauthorized activity.
- Consider placing a fraud alert or credit freeze with the major credit bureaus as a precaution.
- Be cautious of phishing emails or calls referencing ACIG or a possible data breach.
- Keep records of any suspicious account activity in case it becomes relevant to a future claim.
File a Data Breach Lawsuit Against ACIG
If it is confirmed that your personal information was exposed in a data breach involving American Contractors Insurance Group, you may be entitled to compensation through a class action lawsuit. Affected individuals could recover damages for the risk of identity theft, time spent monitoring accounts, and any financial losses connected to the breach.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
