F500 Insurance Carriers · Insurance: Property and Casualty (Mutual) · Data breach
Farmers Insurance Exchange
Headline
The confirmed 2025 breach reached Farmers Insurance Exchange and affiliated entities.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The confirmed 2025 breach reached Farmers Insurance Exchange and affiliated entities. Farmers operates as a reciprocal exchange, meaning it is technically owned by its policyholders and managed by a separate attorney-in-fact - a structure most policyholders could not describe and which determines who actually bears the loss. Farmers is also distributed largely through captive agents, so the distributed-agent exposure documented in the New York Life row applies here at scale.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Multiple law firms opened class-action investigations shortly after disclosure; not independently confirmed whether a formal settlement has been reached as of this research — standard binding arbitration + class action waiver expected for individual policyholder agreements.
Data sharing
CONFIRMED MAJOR 2025 BREACH: Farmers Insurance Exchange and Farmers Group confirmed a breach affecting 1,071,172 individuals — an unauthorized actor accessed a THIRD-PARTY VENDOR'S database containing Farmers customer information (the unauthorized actor accessed the vendor's database on May 29, 2025; Farmers learned of it on May 30). Exposed data included names, addresses, birthdates, driver's license numbers, and last-4 SSN digits. Though Farmers did not name the vendor, BleepingComputer reported that it had learned the data was stolen in the Salesforce data-theft attacks (Farmers' own notice names no vendor), linking this incident to the SAME broader 2025 attack campaign (ShinyHunters/Scattered Spider exploiting Salesforce customer-data platforms) documented repeatedly throughout this tracker (Air France/KLM, Amtrak, Panera, 7-Eleven, and others). Notifications began Aug 22, 2025; Farmers offered 24 months of free credit/identity monitoring (registration deadline Nov 25, 2025).
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy farmers.com/legal/privacy | Not fetched yet | NO (HTML only) |
| Terms of service farmers.com/legal/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.