Penalty Amount
$14,200,000
Consumers Affected
825,000
New York Attorney General Letitia James secured $14.2 million in settlements from eight car insurance companies for failing to implement reasonable data security controls, leading to data breaches that exposed over 825,000 New Yorkers' personal information including driver's license numbers and dates of birth. Hackers exploited vulnerabilities in the companies' online quoting tools to steal the data, which was later used to file fraudulent unemployment claims during the COVID-19 pandemic. The settlements require the companies to pay penalties and implement enhanced cybersecurity measures including data inventory maintenance, multifactor authentication, and improved threat response procedures.
The eight settling companies must pay a combined $14.2 million in civil penalties, with individual penalties ranging from $815,000 to $2.8 million per company. All companies are required to implement and maintain a comprehensive information security program, including maintaining a private data inventory, reasonable authentication procedures (such as multifactor authentication), logging and monitoring systems to detect suspicious activity, and enhanced threat response procedures. Affected New Yorkers were offered one year of free credit report monitoring.
In-house legal teams at companies that use online consumer-facing data collection tools (including quoting, pre-fill, or account portals) should review all vendor agreements with data brokers or third-party tool providers to ensure they include mandatory security controls, breach notification requirements, and liability for security failures. Contracts should explicitly require multifactor authentication for agent or employee access, regular security assessments of tools handling private information, and maintenance of comprehensive data inventories. Companies should also update incident response provisions in vendor agreements to align with regulatory expectations for timely breach detection and reporting, and include requirements for logging and monitoring of suspicious activity. For entities in the insurance industry, specific review of agency quoting tool agreements for security warranties and compliance with state cybersecurity regulations is recommended.
Entity
American Family Mutual Insurance Company/Midvale Indemnity Company; Farmers Insurance; Hagerty Insurance Agency; The Hartford Insurance Group; Infinity Insurance Company; Liberty Mutual Insurance; Metromile; State Auto Mutual Insurance Company
Industry
InsuranceOfficial Press Release
https://ag.ny.gov/press-release/2025/attorney-general-james-secures-142-million-car-insurance-companies-over-data
american family mutual insurance company s.i assurance of di
https://ag.ny.gov/sites/default/files/settlements-agreements/american-family-mutual-insurance-company-s.i-assurance-of-discontinuance-2025.pdf
farmers insurance exchange assurance of discontinuance 2025
https://ag.ny.gov/sites/default/files/settlements-agreements/farmers-insurance-exchange-assurance-of-discontinuance-2025.pdf
hagerty insurance agency assurance of discontinuance 2025
https://ag.ny.gov/sites/default/files/settlements-agreements/hagerty-insurance-agency-assurance-of-discontinuance-2025.pdf
hartford fire insurance company assurance of discontinuance
https://ag.ny.gov/sites/default/files/settlements-agreements/hartford-fire-insurance-company-assurance-of-discontinuance-2025.pdf
infinity insurance company assurance of discontinuance 2025
https://ag.ny.gov/sites/default/files/settlements-agreements/infinity-insurance-company-assurance-of-discontinuance-2025.pdf
liberty mutual holdings company assurance of discontinuance
https://ag.ny.gov/sites/default/files/settlements-agreements/liberty-mutual-holdings-company-assurance-of-discontinuance-2025.pdf
metromile llc assurance of discontinuance 2025
https://ag.ny.gov/sites/default/files/settlements-agreements/metromile-llc-assurance-of-discontinuance-2025.pdf
state automobile insurance company assurance of discontinuan
https://ag.ny.gov/sites/default/files/settlements-agreements/state-automobile-insurance-company-assurance-of-discontinuance-2025.pdf
New York Attorney General Enforcement Page
https://ag.ny.gov/press-releases
"The car insurance companies involved in today’s settlements are: American Family Mutual Insurance Company/Midvale Indemnity Company, Farmers Insurance, Hagerty Insurance Agency, The Hartford Insurance Group, Infinity Insurance Company, Liberty Mutual Insurance, Metromile, and State Auto Mutual Insurance Company."
"secured $14.2 million from eight car insurance companies"
"October 14, 2025"
"New York Attorney General Letitia James"
"did not implement reasonable data security controls to protect consumers’ private information"
"more than 825,000 New Yorkers"
$3.3M
New York Attorney General James announced a multistate settlement with three major egg producers for illegally coordinating to influence a daily egg price index, artificially inflating prices for consumers. The companies will deliver 53 million eggs to food banks and pay $3.3 million, along with adopting compliance measures.
$3.3M
New York Attorney General Letitia James, along with the U.S. Department of Justice and 16 other states, reached a settlement with three major egg producers—Cal-Maine Foods, Versova/Centrum, and Hickman's Egg Ranch—for illegally coordinating to manipulate the Urner Barry price index, artificially inflating egg prices nationwide. The companies will deliver 53 million eggs to food banks across participating states, pay $3.3 million, and adopt compliance measures to prevent future violations.
New York Attorney General Letitia James issued a consumer alert warning New Yorkers about gold bar scams targeting seniors, where scammers trick victims into converting money into gold bars. The alert provides tips to help consumers avoid falling victim to these scams.
$3.3M
New York Attorney General Letitia James announced a multistate settlement with Cal-Maine Foods, Versova/Centrum, and Hickman's Egg Ranch for illegally coordinating to manipulate the Urner Barry egg price index, artificially inflating egg prices. The companies will deliver 53 million eggs to food banks and pay $3.3 million, along with compliance measures.
$3.3M
New York Attorney General Letitia James and a bipartisan multistate coalition, alongside the U.S. Department of Justice, settled with three major egg producers for illegally coordinating to manipulate the Urner Barry daily price index, artificially inflating egg prices for retailers and consumers. The companies will deliver 53 million eggs to food banks nationwide, including 4,968,000 eggs to New York, and pay a combined $3.3 million, along with adopting compliance measures to prevent future violations.
Attorney General Jennifer Davenport joined a coalition of 23 states and DC in suing the Trump Administration over policy changes by the Administration for Children and Families (ACF) that would allow broad sharing of TANF recipients' sensitive personal data with other federal agencies, including ICE. The lawsuit argues the policy violates the Administrative Procedure Act and the Spending Clause, and seeks to block its implementation.