Gyms & Home-Auto Insurance · Home/Auto Insurance · Data breach
Erie Insurance
Headline
The 2025 cyber incident at Erie Indemnity (alleged by plaintiffs, but not confirmed by Erie, to be ransomware) had a contested outcome, and contested is the operative word - the row should stay that way in any…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The 2025 cyber incident at Erie Indemnity (alleged by plaintiffs, but not confirmed by Erie, to be ransomware) had a contested outcome, and contested is the operative word - the row should stay that way in any published writeup until the scope is independently confirmed. What is worth recording is that Erie is a regional carrier with a strong reputation and a heavily Mid-Atlantic and Appalachian footprint, so this is a directly local finding for a large number of Virginia, Maryland and Pennsylvania households. Regional carriers also generate far less national coverage than national ones, which means their incidents are systematically under-documented relative to their local impact.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual policyholder agreements, separate from the class actions filed in June 2025 (current status not re-verified as of Oct 2026).
Data sharing
2025 CYBERSECURITY INCIDENT (plaintiffs allege ransomware; Erie said it had seen no evidence of ransomware), WITH A CONTESTED OUTCOME: Erie Indemnity Company (managing Erie Insurance, based in Pennsylvania, serving 12 states + DC) detected unusual network activity June 7, 2025, causing a full NETWORK OUTAGE affecting ALL systems; Google's Threat Intelligence Group suggested (though did not confirm) the notorious 'Scattered Spider' group — the same threat actor implicated in the Qantas/Hawaiian Airlines/WestJet cluster documented in the Global Airlines tab — may have been responsible, given the timing and pattern match to its known targeting of insurers/retailers. TWO SEPARATE class actions were filed within days (by an Illinois customer and a former Wisconsin employee), each seeking $5 million. HOWEVER, Erie's own subsequent statement (reported by Reuters in July 2025 as operations resumed after the month-long outage), following an independent forensic investigation, asserted there was 'NO EVIDENCE that any sensitive personal information, financial records or legally protected data was breached' during the incident — a notably different resolution from most other breach entries in this tracker, where sensitive data exposure was ultimately confirmed rather than ruled out.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. PUBLIC COMPANY (ERIE). Service route: c/o General Counsel / Corporate Secretary, Erie, Pennsylvania — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy erieinsurance.com/legal/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service erieinsurance.com/legal/terms-of-use | Not fetched yet | NO (HTML only) |
| Website erieinsurance.com | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No comprehensive state privacy statute on file for Pennsylvania