Almeida Law Group is investigating a data breach at Midvale Indemnity Company. The breach occurred on June 30th, 2026 – August 20th, 2026 and was discovered on August 31st, 2026. If you were affected, contact Almeida Law Group.
About Midvale Indemnity Company
Midvale Indemnity Company is a property and casualty insurance subsidiary of American Family Mutual Insurance Company, S.I., part of the American Family Insurance Group. Founded in 1970 and acquired by American Family in 2012 under the name Lumberman’s Casualty Insurance Company, the company was renamed Midvale Indemnity in 2013 and is headquartered in Madison, Wisconsin. It underwrites auto and property insurance policies and operates under the American Family brand, offering online auto insurance quoting through amfam.com and midvaleinsurance.com.
What Happened?
Midvale Indemnity Company was listed in a Texas Attorney General data security breach report. According to that filing, a breach occurred between June 30th, 2026 and August 20th, 2026, was discovered on August 31st, 2026, and affected 38,381 individuals in total. Consumers were notified by U.S. Mail. The data involved was limited to names and driver’s license numbers. No ransomware group or threat actor has been publicly identified in connection with this incident, and no additional attack-method details have been reported.
The breach notification was filed jointly by Midvale Indemnity Company and American Family Connect Insurance Company, according to Massachusetts Attorney General breach notification records from September 2026, suggesting the incident may span more than one entity within the American Family Insurance Group. This is not the first time Midvale has reported a breach involving driver’s license numbers. In January 2021, threat actors exploited Midvale’s online auto insurance quoting platform to extract 283,734 driver’s license numbers. That incident led to a New York DFS Consent Order in October 2025 and a $2.8 million settlement secured by the New York Attorney General as part of a broader $14.2 million enforcement action against eight auto insurance companies. A class action filed in connection with the 2021 breach, Baysal v. Midvale Indemnity Company et al. (Case No. 3:21-cv-00394, W.D. Wis.), was dismissed for lack of standing and that dismissal was affirmed by the Seventh Circuit in August 2023. No class action litigation connected to the 2026 breach has been identified yet.
Key Facts at a Glance
- Company or Organization: Midvale Indemnity Company
- Industry: Property and Casualty Insurance
- Location: Madison, Wisconsin
- Incident type: Unauthorized access to personal information
- Date of breach: June 30th, 2026 – August 20th, 2026
- Date breach discovered: August 31st, 2026
- Date of consumer notification: September 2026
- Total persons affected: 38,381
- Prior breach: Yes — January 2021 breach involving 283,734 driver’s license numbers; NY DFS Consent Order and $2.8 million NY AG settlement entered in October 2025
- Litigation status: 2021 breach class action (Baysal v. Midvale Indemnity) dismissed for lack of standing; Seventh Circuit affirmed August 2023. No litigation identified for the 2026 breach.
- Source: Texas Attorney General Data Security Breach Report (BR-0005388); Massachusetts AG – Data Breach Notification Letters September 2026; NY DFS Consent Order – Midvale Indemnity (October 2025); NY AG Press Release – $14.2 Million Settlement (October 2025)
What Should You Do?
If your information was included in this breach, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Monitor your existing financial accounts for unfamiliar activity and review your credit reports at AnnualCreditReport.com. Because driver’s license numbers were exposed, be alert to any government-issued ID fraud or attempts to use your license number to obtain financial products. If you receive any notice of identity theft or suspect misuse of your information, you can report it and get a personalized recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
