The Impact of the Ransomware Attack on Inszone Insurance

Incident Date:

April 10, 2024

World map

Overview

Title

The Impact of the Ransomware Attack on Inszone Insurance

Victim

Inszone Insurance

Attacker

Hunters International

Location

Valhalla, USA

New York, USA

First Reported

April 10, 2024

Ransomware Attack on Inszone Insurance

Victim Profile

A full-service insurance brokerage firm founded in 2002 and headquartered in Sacramento, California, Inszone Insurance Services, has been targeted in a ransomware attack by the Hunters International group. The company operates in the Insurance sector and has 47 locations across several states in the U.S., with plans for further expansion nationwide. Inszone Insurance Services has between 201-500 employees and reported revenue of $280.4 million.

Company Standout

Known for providing a wide range of property & casualty insurance and employee benefits solutions, Inszone Insurance Services is committed to delivering excellent customer service, innovative solutions, and coverage expertise to its clients. With a strong and experienced management team, the company continues to grow organically and through acquisitions, solidifying its national presence in the insurance industry.

Ransomware Attack Details

Becoming a target of cybercrime by Hunters International, who employed ransomware as their attack technique, led to the exfiltration of 213 GB of sensitive data for Inszone Insurance Services. The data encompassed databases, personal information, passwords, financial documents, and more, totaling over 615,000 files. A sample of leaked data was provided.

Vulnerabilities

The high revenue and expansive operations of Inszone Insurance Services make it an attractive target for ransomware groups like Hunters International. The company's plans for further expansion could potentially increase their attack surface, making them more in jeopardy to these sorts of attacks.

Sources:

Inszone Insurance Services Website

Inszone Insurance Services LinkedIn Profile

Inszone Insurance Services ZoomInfo Profile

Hunters International Dark Web Profile

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.