July 24, 2025 – Palomar Insurance Corporation (“Palomar”) is writing to inform you of a recent data security incident that may have resulted in an unauthorized access to your sensitive personal information. We are providing you with details about the incident, steps we are taking in response, and resources available to help you protect against the potential misuse of your information. Please be assured Palomar takes the protection and proper use of your personal information very seriously.
What Happened?
On October 23, 2024, Palomar was made aware of unusual activity when a threat actor attempted to access Palomar’s network without authorization. Upon discovery of this incident, Palomar immediately worked with their Managed Service Provider (MSP) to secure its systems and begin an internal review of the incident. Furthermore, Palomar promptly engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation to determine the nature and scope of the incident. The forensic investigation determined that the threat actor may have accessed personally identifiable information (“PII”) without authorization.
Based on the forensic findings, Palomar performed data mining and reviewed the accessed files to identify the specific individuals and the types of information that may have been compromised. On May 1, 2025, the data mining process was completed. On May 1, 2025, Palomar engaged a third-party notice vendor to assist with the mailings, call center, and provide identity theft protection services. Thereafter, Palomar worked to verify the client information and addresses for mailing. On June 17, 2025, Palomar finalized the list of individuals to notify.
What Information was Involved?
The information impacted varied by individual. Based on the investigation, the following information related may have been subject to unauthorized access: Date of Birth, Driver’s License Number and Expiration Date, Social Security Number, Insurance Policy Number, Insurance Provider, Login Username and Password.
What We Are Doing:
Palomar is committed to ensuring the security and privacy of all personal information within its control and is taking steps to prevent a similar incident from occurring in the future. Upon discovery of the incident, Palomar moved quickly to investigate and respond to the incident and secure its systems. Specifically, Palomar resecured all of the compromised accounts, changed administrative credentials, and took steps and will continue to take steps to mitigate the risk of future harm.
What You Can Do:
We encourage you to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to monitor your credit reports for suspicious or unauthorized activity. Additionally, security experts suggest that you contact your financial institution and all major credit bureaus to inform them of such a breach and then take whatever steps are recommended to protect your interests, including the possible placement of a fraud alert on your credit file. Please review the Additional Resources to Help Protect Your Information, to learn more about how to protect against the possibility of information misuse. In light of the incident, we provided affected individuals with certain categories of sensitive information impacted with complimentary credit monitoring and identity theft restoration services.
For More Information:
If you have any questions or concerns not addressed in this letter, please call (866) 461-7755 (toll free) Monday through Friday, during the hours of 8:00 a.m. and 5:30 p.m. Central Time (excluding U.S. national holidays).
Palomar sincerely regrets any concern or inconvenience this matter may cause and remains dedicated to ensuring the privacy and security of all information in our control.
Sincerely,
Palomar Insurance Corporation
