Ransomware victim disclosure
← All victimsInsurance Office of America
Claimed by Daixin · listed 8 months ago
Status timeline
- Listed
Sep 11, 2025
- Data leaked
At a glance
- Group
- Daixin
- Status
- Data leaked
- Country
- United States
- Sector
- Financial Services
- Listed on leak site
- Sep 11, 2025
About the victim
AI dossier — public-source company profileInsurance Office of America (IOA) is a full-service insurance agency and brokerage headquartered in the United States, founded in 1988. The company offers a broad range of business, personal, and employee benefits insurance solutions across dozens of industries, and is described as one of the fastest-growing insurance agencies in the country. IOA also provides risk management, captive management, compliance, and data analytics services.
- Industry
- Insurance Brokerage & Employee Benefits
- Founded
- 1988
Attack summary
Severity: critical — IOA is a large insurance brokerage handling regulated personal and financial data (PII, policyholder records, employee benefits, health and financial risk data) for clients across numerous industries including healthcare, government, and financial institutions. Data has been confirmed published by Daixin, indicating actual exfiltration of likely large volumes of sensitive regulated data at scale.The Daixin ransomware group claims to have attacked Insurance Office of America and has published data from the breach (disclosed status: data_published). No specific ransom amount or data volume has been stated, but the disclosure indicates exfiltration and publication of company data.
Data the group says was taken
AI dossier — extracted from the leak post- Client insurance records
- Employee benefits data
- Policyholder personal information
- Business financial records
- Compliance and HR data
- Internal corporate documents
What the group claims
Insurance Office of America (IOA) is a premier, full-service insurance agency dedicated to delivering bespoke insurance solutions since 1988. We’re one of the USA’s fastest-growing agencies.
Sources
- Victim siteioausa.com
Source
Indexed 8 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
