NAIC.org Listed by shinyhunters Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The National Association of Insurance Commissioners maintains systems that collect and exchange regulatory filings from insurers across all fifty states. A June 18, 2026 listing by the shinyhunters group claims that more than 3.1 terabytes of data from those systems were taken. The number of individuals whose personal information may be included remains unknown, which leaves affected people without a clear picture of whether their details have been exposed.

Inside the incident

The incident was reported on June 18, 2026. The shinyhunters group listed NAIC.org on its leak site and stated that internal files had been exfiltrated during a ransomware operation. The reported summary describes more than 3.1 terabytes and 105,000 files taken from multiple NAIC platforms, including INSData, SERFF, and state insurance department reporting systems. No confirmation of the data’s authenticity or completeness has been issued by NAIC, and the exact method of access has not been disclosed.

Inside shinyhunters

Shinyhunters is a ransomware group that publicly lists victim organizations on dedicated leak sites after claiming to have stolen data. The group typically pairs file theft with ransom demands and has been linked to prior incidents involving large data volumes from corporate and government-linked targets. In this case the group claims responsibility for the NAIC.org listing, but no independent verification of that claim has been published.

About NAIC.org

The National Association of Insurance Commissioners coordinates regulatory standards and data exchange among state insurance departments and licensed insurers. Its platforms receive statutory filings, statistical reports, and credit-rating information used for oversight of the insurance sector. A compromise at this level can affect regulatory processes that underpin consumer protections and market stability across multiple jurisdictions.

What data was at risk

The reported summary lists internal files allegedly taken from NAIC systems. Specific categories mentioned include insurer regulatory filings, statistical reports containing federal EINs, and rating-agency files that include CUSIP and ISIN identifiers. The precise contents of the exfiltrated material have not been independently confirmed, and the number of individuals whose personal data may be present is stated as unknown.

• 2.1 million insurer regulatory filing PDFs
• 40,000 quarterly statistical CSVs containing federal EINs and company data
• 45,000+ licensed rating agency files from Moody’s, Fitch, S&P, Kroll, DBRS, and AM Best

What's at stake

Insurance regulatory filings often contain company identifiers and operational details that can be reused for targeted fraud or competitive intelligence. When such records also include EINs or securities identifiers, the material can support identity-based schemes or financial reconnaissance. Organizations that rely on these systems may face added scrutiny of their data-handling practices and possible regulatory follow-up.

What to do if you're exposed

Monitor statements from NAIC and your state insurance department for any official notice. Review credit reports and account statements for unusual activity, and consider placing fraud alerts with major credit bureaus if you have filed insurance-related documents through affected channels. Readers can run a free exposure scan of their email address to check whether their information appears in known breach data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.