Were you recently affected by a data breach?

Adobe Insurance Brokers Data Breach

Ransomware group PEAR reportedly listed Adobe Insurance Brokers, an independent personal and business insurance agency in California, as a victim on October 21, 2026. The agency has not publicly confirmed a breach, and what data may be involved is unknown.

Adobe Insurance Brokers
Date of Breach: October 21, 2026 (claimed by a ransomware group, unconfirmed)
CAU logo

Who was affected:

Clients of Adobe Insurance Brokers

Impacted Data:

Not yet determined. A ransomware group has listed the agency on its leak site, but the agency has not confirmed a breach or what data is involved.

A ransomware group called PEAR has reportedly listed Adobe Insurance Brokers, a California independent insurance agency, as a victim. The agency has not publicly confirmed a breach, and the scope of any exposure is unknown.

Adobe Insurance Brokers’s Data Breach Investigation

Adobe Insurance Brokers is an independent personal and business insurance agency in California. An agency like this works with many carriers on behalf of individuals and companies, which means its files can hold details about customers, about the businesses they own, and about the agency’s own employees. Because those records are collected to quote, bind and service policies, they can be unusually detailed.

On October 21, 2026, a ransomware and data-extortion group that calls itself PEAR reportedly added Adobe Insurance Brokers to its leak site. Dark web monitoring services that track those postings recorded the listing the same day, and the post was reportedly the only information available about the matter. The plaintiff-side resource ClassAction.org has noted that attorneys are looking into the reports. This page treats every one of these items as a claim or an investigation, not as an established fact.

Adobe Insurance Brokers has not publicly confirmed that its systems were breached. No notice letter, regulatory filing or company statement describing an incident turned up in the sources reviewed. Those sources also do not say how an intruder would have gotten in, which systems were involved, whether any data was actually copied, or whether the agency’s operations were disrupted. The listing reportedly gives no description of the alleged incident and does not state its impact.

There is a further reason for caution. One monitoring service that republished the listing added a warning that postings attributed to this group have been reported to include unverified or fabricated victim claims, and it advised treating the post as unconfirmed until independent evidence supports it. That does not mean the claim is false, and it does not mean it is true. It means that the existence of a listing is not, on its own, proof that an agency lost customer information.

No count of affected people has been published, so this page does not estimate how many customers or employees may be involved. It also does not list specific data types as exposed, because the listing does not itemize what the group says it holds, and ClassAction.org lists the impacted data as still to be determined.

A leak-site listing and a legal notification duty are different things. Extortion groups post victims to pressure them into paying, and a listing alone does not establish that a breach occurred. A business’s duty to notify people generally begins when its own investigation determines that personal information was accessed or acquired, and that work can take weeks or months. A public claim by an attacker often appears long before any official notice. Some claims are later shown to be exaggerated or false, while others are confirmed in full.

If the claim proves accurate, the kind of information an insurance agency keeps is a real concern. Agency files can include names, home and business addresses, dates of birth, driver’s license numbers, vehicle and property details, policy and claim records, and payment or bank information used for premiums. Business clients may have shared tax identification numbers, financial statements and employee information when applying for coverage. That is general context about the industry, not a statement about what Adobe Insurance Brokers held or what was taken. Information of this kind can enable identity theft, insurance fraud and convincing scam messages that reference a real policy or a real renewal.

Insurance agencies are also a frequent target for extortion groups. They hold sensitive personal and financial records for many people in one place, they handle payments, and they often run on a small technology footprint, which can make them attractive to criminals. Scammers who obtain policy details can pose as an agent and ask a customer to confirm a payment or update banking information. For that reason, customers and employees of Adobe Insurance Brokers may want to know whether the agency has been named in an incident.

At this stage, nobody needs to take drastic steps, but a few sensible precautions cost little. Watch for any notice from the agency, and be cautious with unexpected calls, texts or emails about premiums, renewals, claims or changes to payment details. Confirm any request for payment or banking updates by phone, using a number you already trust rather than one provided in the message. Consider reviewing your credit reports and your insurance and bank statements. If a notice does arrive, it will be the best source for what happened to your information.

This page will be reviewed if the agency, a regulator or a reliable news outlet publishes more detail. A claim by an extortion group is not a finding about fault, and whether the agency’s safeguards were adequate remains an open question. Those are the kinds of questions attorneys can ask on behalf of people who were harmed if the claim is confirmed.

When Did This Breach Occur?

The leak-site listing was recorded by monitoring services on October 21, 2026. The sources reviewed do not say when any intrusion may have taken place, and Adobe Insurance Brokers has not announced a timeline. The date of the listing is not necessarily the date of any incident.

If you receive a notice, its own dates and description will be the most reliable record of the timeline for your information.

What Information Was Breached?

No specific data types have been confirmed. The listing as summarized by trackers does not say which records are involved, and ClassAction.org lists the impacted data as to be determined.

Because nothing has been confirmed, it is prudent to watch for a notice that will state which details, if any, were involved.

What You Can Do

If you received a notice related to Adobe Insurance Brokers or believe you may be affected, consider these steps:

  • Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
  • Be cautious with emails, texts or calls about premiums, renewals or payment details, and verify any request using a phone number you already trust.
  • Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
  • Review bank, card and insurance statements for anything you do not recognize.
  • Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.

File a Data Breach Lawsuit Against Adobe Insurance Brokers

If you are notified that your personal information was exposed in an incident involving Adobe Insurance Brokers, you may have legal options. Companies are expected to safeguard the sensitive information entrusted to them, and a class action can help hold them accountable when they fail to do so.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?
Other Data Breaches
Date of Breach: October 21, 2026 (claimed by a ransomware group, unconfirmed)
Date of Breach: Reported to the Vermont Attorney General on October 21, 2026 (incident date not disclosed)
Date of Breach: October 21, 2026 (claimed by a ransomware group, unconfirmed)
Related News

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.