Almeida Law Group is investigating a data breach at PDCM Insurance. The breach was discovered on August 3rd, 2026. If you were affected, contact Almeida Law Group.
About PDCM Insurance
PDCM Insurance, formally known as Pedersen, Dowie, Clabby & McCausland, is a privately held independent insurance agency headquartered in Waterloo, Iowa. Founded in 1916, the company provides personal insurance, business insurance, health insurance, employee benefits, risk management, and related services to clients across northeastern Iowa. It employs between 51 and 200 people.
What Happened?
PDCM Insurance was listed in a Texas Attorney General data security breach report published September 29th, 2026. According to that report, the breach was discovered on August 3rd, 2026, and affected a total of 39,759 individuals. Consumer notices were sent by U.S. Mail. The types of information involved include names, addresses, Social Security numbers, driver’s license numbers, medical information, and health insurance information. Additional data types reported through the U.S. Department of Health and Human Services disclosure include dates of birth, other insurance policy information, and payment information.
According to local news outlet KWWL, PDCM became aware of suspicious network activity on April 28th, 2025, and its investigation found unauthorized access to certain files on April 27th and April 28th, 2025. PDCM reported the incident to the HHS on June 27th, 2025. The Texas Attorney General filing, however, lists the breach discovery date as August 3rd, 2026—approximately 15 months after the unauthorized access occurred—and consumer notifications appear to have gone out around that same time. The LockBit 3.0 ransomware group claimed responsibility for the attack and listed PDCM on its dark web leak site around May 1st, 2025, according to threat intelligence trackers including Breachsense and HookPhish. That attribution is an attacker-side claim and has not been confirmed by PDCM or any regulator as a ransomware incident; PDCM’s own public statements describe only suspicious network activity and unauthorized access. At least one law firm, Cafferty Clobes Meriwether & Sprengel LLP, has publicly announced an investigation into the breach, but no class action lawsuit had been filed as of September 2026.
Key Facts at a Glance
- Company or Organization: PDCM Insurance (Pedersen, Dowie, Clabby & McCausland)
- Industry: Insurance Services / Insurance Brokerage
- Location: Waterloo, Iowa
- Incident type: Unauthorized access to files
- Date breach discovered: August 3rd, 2026
- Date of consumer notification: August–September 2026 (U.S. Mail)
- Total persons affected: 39,759
- Litigation status: Law firm investigation announced (Cafferty Clobes Meriwether & Sprengel LLP); no class action filed as of September 2026
- Source: Texas Attorney General data security breach report (BR-0005375); KWWL News; ClaimDepot; Breachsense; HookPhish
What Should You Do?
If you received a notice from PDCM Insurance, take advantage of any identity theft protection enrollment offered and be sure to meet the enrollment deadline stated in your notice. Place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—and regularly monitor your bank and financial accounts for suspicious activity. Request your free credit reports at AnnualCreditReport.com and review them carefully. Because medical information and health insurance information were involved in this breach, also review your Explanation of Benefits statements and request copies of your medical records to check for any services you do not recognize. If you spot signs of fraud or identity theft, report them at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.