United Underwriters Data Breach: Letters Went Out, No Lawsuit Filed Yet
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
United Underwriters, a Provo, Utah insurance underwriter that is part of Trucordia, began mailing breach letters on September 21, 2026. It says an outsider downloaded files on May 1, 2026 that can include Social Security numbers, ID numbers, financial account numbers and health information. As of October 12, 2026 we found no United Underwriters data breach lawsuit on file — only law firms advertising investigations. There is no settlement and no claim form. The one real deadline: enroll in the free credit monitoring by December 31, 2026.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened, per the Company's Own Notice
United Underwriters (UUI) writes auto, home, renters and business insurance and handles the claims. According to its website notice, it identified suspicious activity on some of its systems “earlier this year,” stopped it and brought in outside forensic experts. The investigation found that an unauthorized actor downloaded files on May 1, 2026.
The company says the data varies by person but could include name and date of birth, birth or marriage certificates, Social Security numbers, government-issued ID numbers, financial and payment card account numbers, health information or account credentials. A report filed with Massachusetts regulators on September 22, 2026, as described by ClassAction.org, lists Social Security numbers, medical records, financial accounts and driver's licenses.
One date does not line up: the California Attorney General's record gives the date of breach as April 7, 2026, while the company's notice says the incident happened in May 2026. The likely reading is that April 7 is when activity began and May 1 is when files left the system, but the company has not said so.
Case Details
No court case has been found. As of October 12, 2026, a search of CourtListener's federal docket index for “United Underwriters” returned zero cases, and our own database of new federal filings has no case naming United Underwriters or its parent, Trucordia Insurance Services, LLC. There is therefore no court, no case number and no judge to report.
What exists are law-firm “investigations.” ClassAction.org, for example, says attorneys are “looking into whether a class action lawsuit can be filed.” An investigation is a search for clients, not a lawsuit. State courts, such as those in Utah, are not covered by these searches, so a state filing cannot be ruled out completely.
Status: Breach Notified, No Lawsuit, No Settlement
How many people are affected is not confirmed by any regulator page we could open. ClaimDepot, a breach-tracking site that sends readers to law firms, puts the total at 77,894; another tracker lists the count as undisclosed. California only requires the sample letter when more than 500 of its residents are notified, so at least that many Californians received one.
Are You Affected?
The test is the letter. The official notice is headed “Notice of Security Event,” dated September 21, 2026, and comes from “United Underwriters Insurance, c/o Cyberscout, P.O. Box 3826, Suwanee, GA 30024.” It names the fields taken from your file and contains your personal activation code. Keep it.
If UUI did not have a current address for you, it relies on the substitute notice on its website instead of a letter. If you were a UUI policyholder or filed a claim with UUI and got nothing, call the company's dedicated line at 1-888-940-7758. The letter gives hours of 7 a.m. to 7 p.m. CT on weekdays; the website says 8 a.m. to 5 p.m. CT.
Nobody needs to “join” anything now. If a class action is filed and later settles, notice goes to class members from a court-appointed administrator.
Is There Money? Not Now
For what comparable breach settlements have paid elsewhere, see our data breach settlement calculator — that is context, not a forecast for this case.
United Underwriters Breach Timeline
- 1
April 7, 2026 — Date of Breach on the California Record
The California Attorney General's listing gives this as the date of breach. The company's own notice speaks of an incident in May 2026.
- 2
May 1, 2026 — Files Downloaded
Per the company, an unauthorized actor downloaded files containing personal information. UUI then reviewed the files to find whose data was in them.
- 3
September 21, 2026 — Letters Mailed, California Notified
Individual notices go out via Cyberscout; the breach is reported to the California Attorney General the same day and a substitute notice goes up on uuinsurance.com.
- 4
September 22–24, 2026 — Massachusetts Report and Press Release
A report is filed with Massachusetts regulators on September 22, per ClassAction.org, and a press release follows on September 24. Law firms begin advertising investigations.
- 5
October 8, 2026 — Corrected Press Release
UUI replaces its September 24 release with a corrected version “due to multiple revisions,” pointing readers to the website notice.
- 6
December 31, 2026 — Monitoring Enrollment Closes
Last day to activate the free 24-month credit monitoring. As of October 12, 2026, no lawsuit has been found and no settlement exists.
Three Things to Watch For
Letters that mention Social Security numbers and an activation code are exactly what imposters copy:
“Claim your United Underwriters settlement”
There is no settlement and no claim form. A site or text asking for your Social Security number or bank details to “secure your payout” is collecting data, not filing a claim.
Fake enrollment links and callers
The real enrollment address is the Cyberscout address printed in your letter, and the real company line is 1-888-940-7758. Do not use a link from an unexpected e-mail or text, and do not read your activation code to someone who calls you.
Lead forms dressed up as the lawsuit
Many pages titled “United Underwriters data breach lawsuit” are law-firm intake forms for a case that has not been filed. Filling one in is contacting a lawyer, not joining a class action — read what you sign.
United Underwriters Breach — Questions People Actually Ask
Is there a United Underwriters data breach lawsuit?
Not that we could find as of October 12, 2026. CourtListener's federal docket search returns no case, and our database of new federal filings has none naming United Underwriters or Trucordia. Law firms say they are investigating, which is not the same as a filed case.
How do I know if I've been affected by a data breach?
For this one, look for a letter dated September 21, 2026 titled “Notice of Security Event” from United Underwriters Insurance, c/o Cyberscout, Suwanee, Georgia. It lists your affected data and an activation code. No letter but you were a UUI customer or claimant? Call 1-888-940-7758.
What data was taken?
It varies by person. The company lists name and date of birth, birth or marriage certificates, Social Security numbers, government ID numbers, financial and payment card account numbers, health information and account credentials as possible fields.
How many people were affected?
Not confirmed by any official source we could open. A breach-tracking site puts it at 77,894; another lists it as undisclosed. California's record shows at least 500 California residents were notified, since that is the threshold for filing there.
Is there a United Underwriters data breach lawsuit payout?
No. There is no lawsuit on file, no settlement and no claim form. The only benefit available is the free 24-month credit monitoring, which you must activate by December 31, 2026.
How much is a data breach lawsuit worth?
It depends on a settlement that does not exist here yet. Past breach settlements usually combine reimbursement of documented losses with a smaller flat payment and monitoring; our data breach settlement calculator shows how those have worked out. Treat any per-person figure quoted for United Underwriters today as a guess.
Is there a class action suit against UnitedHealthcare?
That is a different company. United Underwriters is a Utah property-and-casualty underwriter that is part of Trucordia, not UnitedHealth Group, and this page does not cover UnitedHealthcare; see our UnitedHealthcare lawsuit page instead.
What should I do right now?
Activate the free monitoring with the code in your letter before December 31, 2026. Freeze your credit at all three bureaus — it is free and reversible. Watch bank, card and insurance statements, and keep the letter and envelope.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements taking claims right now, with deadlines
Data Breach Settlement Calculator
What comparable breach settlements have paid per person
Class Action Payout Calculator
Estimate a share once a fund and a class size are known
Farmers Insurance Data Breach
Another insurance-industry breach and where its lawsuits stand