Almeida Law Group is investigating a data breach at American Family Connect Insurance Company. The breach occurred on June 30th, 2026. If you were affected, contact Almeida Law Group.
About American Family Connect Insurance Company
American Family Connect Insurance Company — branded as CONNECT, powered by American Family Insurance — is a property-casualty insurance company headquartered in Madison, Wisconsin, that sells auto, homeowners, renters, umbrella, and specialty insurance lines in 44 states and Washington, D.C. It operates primarily through strategic partnerships, including with Costco and Ameriprise Financial. CONNECT is a wholly owned subsidiary of American Family Insurance Mutual Holding Company and was formerly known as Ameriprise Auto & Home Insurance before being acquired and rebranded in 2020.
What Happened?
American Family Connect Insurance Company was listed in a California Attorney General sample breach notice filed on September 30th, 2026. According to the notice, between June 30th, 2026 and August 20th, 2026, an unauthorized third party used personal information obtained from external sources to generate auto insurance quotes through CONNECT’s online quoting process and, as part of that process, may have acquired driver’s license numbers. CONNECT states that none of its internal systems or databases were accessed and that no current or former customer policy information was affected. The company determined the impact on approximately August 31st, 2026, resolved the technical issue, and strengthened security controls related to its quoting platforms. In response, CONNECT is offering 12 months of single-bureau credit monitoring, a single-bureau credit report, and a single-bureau credit score at no charge through Cyberscout, a TransUnion company. No ransomware group or threat actor has been publicly attributed to this incident.
This breach closely mirrors a 2021 incident involving a sibling company, American Family Mutual Insurance Company, in which unauthorized parties exploited the same type of online auto insurance quoting platform to harvest driver’s license numbers using personal information obtained from outside sources. That breach affected more than 280,000 individuals and resulted in a class action lawsuit, Baysal v. Midvale Indemnity Company et al., which was ultimately dismissed on appeal after the court found that plaintiffs had not demonstrated that the disclosure of their license numbers caused them injury. The recurrence of the same attack vector at a related entity under the same corporate parent five years later is notable. No litigation specific to this September 30th, 2026 filing has been identified.
Key Facts at a Glance
- Company or Organization: American Family Connect Insurance Company (CONNECT, powered by American Family Insurance)
- Industry: Property and casualty insurance
- Location: Madison, Wisconsin
- Incident type: Unauthorized third-party access via online auto insurance quoting platform; driver’s license numbers potentially acquired
- Date of breach: June 30th, 2026
- Date breach discovered: August 31st, 2026
- Date of consumer notification: September 30th, 2026
- Identity theft protection offered: 12 months of single-bureau credit monitoring, credit report, and credit score through Cyberscout (a TransUnion company)
- Enrollment deadline: 90 days from September 30th, 2026
- Prior breach: 2021 quoting-platform breach at sibling entity American Family Mutual Insurance Company affecting 280,000+ individuals; same attack vector; class action dismissed on appeal
- Litigation status: No litigation specific to this incident identified as of October 1st, 2026
- Source: California Attorney General Breach Report (sb24-630618); Wikipedia – Connect (insurance company); BusinessWire – CONNECT rebrand announcement; CaseyGerry – American Family Insurance Data Breach (2021); ClassAction.org – Baysal v. Midvale Indemnity; Bloomberg Law – Drivers Lose Appeal
What Should You Do?
If you received a notice from CONNECT, enroll in the free 12-month credit monitoring service through Cyberscout as soon as possible — you must do so within 90 days of September 30th, 2026 by visiting bfs.cyberscout.com/activate. Because your driver’s license number may have been exposed, you should place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for someone to open new accounts in your name. Review your credit reports for any unfamiliar accounts or inquiries by visiting AnnualCreditReport.com, where you can access free reports from each bureau. Monitor your financial accounts closely for suspicious activity and report any suspected fraud to your financial institution and to the Federal Trade Commission at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
