Doxa Programs, LLC, an insurance general agency and program manager headquartered in Fort Wayne, Indiana, has reported a data breach to state regulators. The company disclosed that certain individuals’ personal information, including Social Security numbers and government-issued ID numbers, was exposed. Companies that handle sensitive personal and financial information on behalf of clients and policyholders have a responsibility to secure that data and to notify affected individuals promptly when it is compromised.
Doxa Programs, LLC’s Data Breach Investigation
Doxa Programs, LLC operates as a managing general agent and underwriting program manager, working with insurance carriers and brokers across several specialty lines, including commercial and surplus lines coverage. The company reported the incident to the Vermont Attorney General’s Office on July 27, 2026, identifying a small number of Vermont residents whose personal information was involved. Doxa Programs, LLC has not publicly disclosed the specific cause of the breach, the date the incident was first detected, or how many individuals nationwide may be affected beyond the Vermont notification.
Companies in the insurance and financial services sector are frequent targets for data breaches because they routinely collect and store some of the most sensitive categories of personal information, including Social Security numbers, driver’s license numbers, and other government-issued identification, often for years after a policy or business relationship ends. This makes insurance program managers and general agencies like Doxa Programs, LLC attractive targets for cybercriminals seeking to commit identity theft, file fraudulent tax returns, or open unauthorized lines of credit using stolen identity information.
When Social Security numbers and government ID numbers are exposed together, the combination is particularly valuable to bad actors because it can be used to pass identity-verification checks that many institutions rely on. Individuals affected by this type of exposure often face an elevated and long-lasting risk of fraud, since Social Security numbers cannot be changed the way a compromised credit card number can. Regulatory notification timelines, like the one that led Doxa Programs, LLC to report this incident to Vermont’s Attorney General, exist precisely so that affected individuals can learn about this kind of exposure and take protective steps as early as possible.
As is common with breach notifications filed with a single state’s regulator, additional details about the full scope of this incident, including whether other states’ residents were affected or what specific security measures failed, may become available as the investigation continues or as the company issues further notifications.
When Did This Breach Occur?
Doxa Programs, LLC reported this breach to the Vermont Attorney General’s Office on July 27, 2026. The company has not publicly disclosed the exact date the breach occurred or when it was first discovered internally. Businesses are generally required to notify state regulators and affected residents within a specific window after discovering a breach, though the precise discovery and containment timeline for this incident has not been made public.
What Information Was Breached?
According to the notification filed with Vermont’s Attorney General, the breach involved Social Security numbers and government-issued ID numbers belonging to a small number of Vermont residents. Doxa Programs, LLC has not publicly specified additional categories of information that may have been involved, such as financial account numbers, medical information, or insurance policy details, though individuals should remain alert for any further notices from the company.
What You Can Do
If you have received a notice from Doxa Programs, LLC or believe you may have been affected by this breach, consider the following steps:
- Place a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion).
- Monitor your credit reports and financial accounts closely for any unfamiliar activity.
- Consider enrolling in a credit monitoring or identity theft protection service, especially if one is offered by the company.
- Be cautious of unsolicited calls, emails, or texts referencing this breach, as scammers often use news of a breach to attempt further fraud.
- File a report with the Federal Trade Commission at IdentityTheft.gov if you discover you have become a victim of identity theft.
File a Data Breach Lawsuit Against Doxa Programs
If your personal information was compromised in the Doxa Programs, LLC data breach, you may have legal options available to you. Companies that collect and store sensitive personal information have a legal obligation to protect it, and when that obligation is not met, affected individuals may be entitled to compensation.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
