On April 30, 2024, the United Services Automobile Association discovered a significant system error that occurred during a routine update to its document delivery system. This error resulted in sensitive documents related to property and casualty insurance being mistakenly posted to another member’s online account. Following the discovery, USAA took immediate action to remove the incorrectly posted documents and initiated a comprehensive investigation to understand the extent of the breach. The investigation, which concluded on July 31, 2024, revealed that some personal information of members, including names and identification numbers, may have been inadvertently disclosed.
The internal breach impacted over 32,000 USAA customers across the country, with approximately 4,200 affected individuals residing in Texas. According to the Texas Office of the Attorney General, the breach included a range of sensitive data, such as social security numbers, driver’s license numbers, government-issued identification numbers, medical information, and dates of birth. Despite the severity of the breach, USAA reported that there were no indications of fraud or identity theft resulting from the incident at that time.
To address the situation and help affected customers protect their identities, USAA is offering a two-year membership with Experian IdentityWorks, a service designed to monitor and mitigate the risks associated with identity theft. A notice was mailed to impacted customers on August 27, 2024, detailing the breach and providing information about the services being offered. This proactive measure aims to assist those affected by the incident in monitoring their personal information and ensuring their data security.
In the notice, USAA explained that the breach occurred on April 13, 2024, and the error was only identified and addressed a few weeks later. The company has emphasized its commitment to data security and transparency throughout the investigation process. By informing its members and offering identity protection services, USAA aims to rebuild trust and reassure its customers about their commitment to safeguarding personal information.
Reference:
