Farmers Insurance Breach Exposes Data of 1.1 Million Customers via Salesforce Compromise

Farmers Insurance has disclosed a data breach stemming from unauthorised access to a third-party vendor’s database, potentially exposing the personal information of about 1.1 million customers. The intrusion began on 29 May 2025, with the breach detected on 30 May 2025 after an authorised actor infiltrated the vendor’s Salesforce-managed environment and data exfiltration occurred.

Investigations found the exposed data included names, addresses, dates of birth, driver’s licence numbers, and the last four digits of Social Security numbers, with no indication of full financial or health records being accessed. Affected individuals were notified by mail starting 22 August 2025, and Farmers has urged customers to monitor for indicators of compromise while offering 24 months of complimentary identity-monitoring services through Cyberscout and a dedicated hotline at 1-833-426-6809.

The incident highlights the risks of third-party dependencies and cloud-based CRM data storage, and Farmers has expanded its threat hunting and vendor-audit activities in response.