Farmers Insurance data breach hits about 1 million tied to Salesforce

Farmers Insurance confirmed a data breach affecting about a million customers, in what investigators describe as a third-party cyberattack tied to a broader wave of Salesforce-related intrusions. The company said the breach occurred on May 29, 2025, was detected the next day, and involved unauthorized access to a vendor database containing customer information. Affected customers were notified starting in late August, with the company indicating the incident involved personal details such as names, addresses, dates of birth, driver’s license numbers, and, in some cases, the last four digits of Social Security numbers. The breach affected Farmers’ policyholders across multiple brands and states, and the company stressed that its own systems were not implicated.

Farmers Insurance, part of the Zurich Insurance Group, oversees a range of brands and products, including auto, home, life, and business coverages through a network of agents and subsidiaries. In its notification, the insurer stated that the third-party vendor had monitoring tools in place, allowing for rapid detection and containment, including blocking the unauthorized actor. The company emphasized that it immediately...