Integrated Specialty Coverages, LLC Data Breach

NOTICE: If you received a NOTICE OF DATA BREACH letter from Integrated Specialty Coverages, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.

​​​​​​​​On July 2, 2025, Integrated Specialty Coverages, LLC (“ISC”) reported a significant cybersecurity incident to the California Attorney General’s Office. The incident occurred between February 16 and February 19, 2025, when an unauthorized actor accessed portions of ISC’s systems (the “Data Breach”). Approximately, 90,000 people have been affected.

Recently, ISC has begun sending data breach notification letters to those affected. ISC offers credit monitoring and identity protection services through Cyberscout to affected individuals, along with details on steps to prevent identity theft. If you received a data breach notification letter, it confirms that your data was affected by this Data Breach..

Founded in 2016, Integrated Specialty Coverages, LLC (ISC) is an insurance program administrator and managing general agent based in Carlsbad, California. The company specializes in underwriting and managing insurance programs across industries like construction, hospitality, transportation, and entertainment. ISC leverages data analytics, proprietary tech, and AI to optimize underwriting and operations, partnering with carriers and brokers to deliver commercial property, liability, workers’ comp, cyber liability, and other niche insurance products.

WHAT INFORMATION IS INVOLVED IN THE INTEGRATED SPECIALTY COVERAGES, LLC DATA BREACH?

Integrated Specialty Coverages Data BreachAccording to ISC, the following types of information have been compromised:  

  • Name
  • Social security number, 
  • Tax ID number,
  • Date of birth, 
  • Driver’s license or other government ID number, 
  • Biometric data (fingerprint image or similar), 
  • and certain medical information.

This information is called your Personally Identifiable Information (“PII”). It tells others about you and is considered part of your identity. Businesses are required to secure this information or risk facing statutory penalties, among other legal penalties. Stolen PII can be used by identity thieves to engage in fraudulent activity using your identity. 

Personal medical information (a specific type of PII) is referred to as Protected Health Information (“PHI”). It is protected under both state and federal law. Healthcare providers and other businesses who handle PHI are required to protect that information. Like stolen PII, stolen PHI can be used by identity thieves to engage in fraudulent activity using your identity. Quite often, PII and PHI are used in conjunction by hackers.

The best way to protect yourself after a data breach is to sign up for credit and identity protection services as soon as possible. 

California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).

NOTICE: If you received a NOTICE OF DATA BREACH letter from Integrated Specialty Coverages, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.