Almeida Law Group is investigating a data breach at Indico Data Center. If you were affected, contact Almeida Law Group.
About Indico Data Center
The Vermont Attorney General’s breach report lists the entity as “Indico Data Center,” and all available evidence indicates this is Indico Data Solutions, Inc., a Boston-based AI software company founded in 2013. The company operates an Intake & Orchestration Platform designed for the insurance industry, automating underwriting triage, claims processing, and policy servicing by converting unstructured documents into structured data. With approximately 43 employees and backing from Aviva, Indico functions primarily as a data processing vendor for insurance carriers and financial services organizations, meaning the personal records it handles belong to its corporate customers’ employees and policyholders.
What Happened?
Indico Data Center was listed in a Vermont Attorney General breach report summary filed September 28th, 2026. According to that filing and supplemental reporting, on May 7th, 2026, Indico Data Solutions determined it had suffered a cybersecurity incident involving unauthorized access to online repositories containing corporate customer information. By June 17th, 2026, the company had completed identifying affected individuals for certain customers. Indico began notifying affected consumers on July 16th, 2026, and reported the breach to the Attorneys General of California, Nebraska, Texas, and Vermont. The Vermont AG summary identifies Social Security numbers as the category of data breached; broader reporting indicates that names, addresses, dates of birth, Social Security numbers, and medical and health information were exposed. The total number of affected individuals nationwide has not been publicly disclosed. Indico is offering eligible individuals 12 months of free single-bureau credit monitoring through Cyberscout, a TransUnion company.
A federal class action lawsuit, Wawrzeniak v. Indico Data Solutions Inc. (Case No. 1:2026cv14132), has been filed in the U.S. District Court for the District of Massachusetts. Law firms Edelson Lechtzin LLP, Federman & Sherwood, and Barnow and Associates, P.C. are separately investigating additional class action claims. No ransomware group has been publicly linked to this incident.
Key Facts at a Glance
- Company or Organization: Indico Data Center (Indico Data Solutions, Inc.)
- Industry: AI / Insurance Technology — intelligent document processing and automation
- Location: Boston, Massachusetts
- Incident type: Unauthorized access to online repositories containing corporate customer information
- Date breach discovered: May 7th, 2026
- Date of consumer notification: July 16th, 2026
- Identity theft protection offered: 12 months of free single-bureau credit monitoring through Cyberscout (TransUnion)
- Litigation status: Federal class action filed — Wawrzeniak v. Indico Data Solutions Inc., Case No. 1:2026cv14132, U.S. District Court, District of Massachusetts; additional investigations by Edelson Lechtzin LLP, Federman & Sherwood, and Barnow and Associates, P.C.
- Source: Vermont Attorney General — Security Breach Notices; Edelson Lechtzin LLP Press Release; ClaimDepot — Indico Data Solutions Data Breach; Wawrzeniak v. Indico Data Solutions — Justia Docket; Coverager — Indico Data discloses security incident
What Should You Do?
If you received a notification from Indico Data Solutions, enroll in the 12 months of free credit monitoring being offered before any stated deadline. Regardless of whether you enroll, consider placing a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for someone to open new accounts in your name. Review your credit reports at AnnualCreditReport.com and monitor your existing financial accounts for any suspicious activity. Because medical and health information may also have been exposed, review your Explanation of Benefits statements and request copies of your medical records to check for any services you did not receive. If you spot anything unfamiliar, report it at IdentityTheft.gov, where you can also create a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
