Farmers Insurance discloses a data breach impacting 1.1M customers

Farmers Insurance disclosed a data breach affecting 1,071,172 customers, linked to the recent wave of Salesforce attacks, according to Bleeping Computer. The breach occurred on 29 May 2025 and involved a third-party vendor, with Farmers quickly detecting the activity, mitigating the incident, and launching a formal investigation.

The company said that the compromised information included customers’ names, addresses, dates of birth, driver’s licence numbers and/or the last four digits of Social Security numbers, and that the in-depth review determined some personal information was accessed on 24 July 2025. The vendor had monitoring tools in place, which allowed rapid containment, and Farmers notified appropriate law enforcement authorities as part of its response.

The incident is described as being tied to a broader pattern of attacks on Salesforce users, with the attackers’ activity associated with UNC6040/UNC6240 and linked to groups including ShinyHunters and Scattered Spider in other breaches.