Farmers Insurance Breach: 1.1 Million Customers Exposed in Salesforce Attack

According to Farmers Insurance, on 30 May 2025 a third-party vendor issued an alert regarding suspicious activity, and unauthorized actors gained access to the database containing customer information. The inquiry confirmed that approximately 1.1 million customers had sensitive data stolen, including names, addresses, dates of birth, driver’s licence numbers, and the last four digits of Social Security numbers.

Although Farmers Insurance did not disclose the name of the third-party vendor, security experts have identified it as Salesforce, and while the exact attack vector remains unclear, it is widely believed the compromise originated from a phishing incident targeting company employees. The company emphasised that Salesforce CRM itself has not been compromised by an intrinsic security flaw, and that the breaches largely stem from social engineering or phishing used to access user accounts. In response, Salesforce has been tightening its security posture, though human susceptibility to phishing remains a critical weakness.