On December 11, 2023, TRISTAR Insurance Group (“TRISTAR”) filed a notice of data breach with the Attorney General of California after discovering that an unauthorized party was able to access its computer network through a cyberattack. In this notice, TRISTAR explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, TRISTAR began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you receive a data breach notification from TRISTAR Insurance Group, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the TRISTAR Insurance data breach. For more information, please see our recent piece on the topic here.

What Caused the TRISTAR Insurance Data Breach?

The TRISTAR Insurance data breach was only recently announced, and more information is expected in the near future. However, TRISTAR’s filing with the Attorney General of California provides some important information on what led up to the breach. According to this source, on November 10, 2022, TRISTAR detected suspicious activity within its IT network. In response, TRISTAR secured its network, notified law enforcement, and then began working with third-party data security experts to investigate the incident and any potential impact on customer data.

The TRISTAR investigation determined that an unauthorized party gained access to the TRISTAR email system on November 4, 2022, and later gained access to other portions of the system on November 9, 2022. The investigation also confirmed that the unauthorized party was able to access certain information about TRISTAR customers.

After learning that sensitive consumer data was accessible to an unauthorized party, TRISTAR Insurance reviewed the compromised files to determine what information was leaked and which consumers were impacted.

On December 11, 2023, TRISTAR Insurance sent out data breach letters to anyone who was affected by the recent data security incident. The publicly available data breach letter from TRISTAR does not provide a list of all affected data points. However, the individual data breach letters sent to victims should provide victims with a list of what information belonging to them was compromised.

More Information About TRISTAR Insurance Group

Founded in 1987, TRISTAR Insurance Group is an independent third-party claims administrator headquartered in Long Beach, California. TRISTAR provides a range of insurance-related services to employers, such as employee benefit plans, property & casualty insurance coverage, managed care services and risk control services. TRISTAR Insurance employs more than 1,000 people and generates approximately $780 million in annual revenue.