Notice of Data Breach
On June 14, 2026, DOXA Insurance Holdings, LLC (DOXA) of Fort Wayne, Indiana, learned that it was the victim of a cybersecurity incident. DOXA is the holding company for several subsidiaries operating in the specialty insurance industry. In addition to serving as parent company, DOXA hosts and maintains data on behalf of its subsidiaries.
What Happened
The incident began on June 12, 2026, and ended June 14, 2026. With assistance from third-party experts, DOXA took immediate steps to contain the incident, secure its systems, restore operations, and begin an investigation into the nature and scope of the incident.
Based on preliminary findings from its investigation, DOXA determined that the incident may have resulted in the unauthorized access and acquisition of certain information it maintains on behalf of itself, DOXA Insurance Holdings, LLC, and the following DOXA subsidiaries:
- DOXA Programs, LLC (Chatham, KidGuard, Promont Specialty)
- DOXA E&S Solutions, LLC (Transportation Insurors/Northwoods, ProPoint)
- Marine Underwriters of America, Inc.
- Agency Marketing Services, Inc.
What Information Was Involved
Depending on the data record, impacted personal information may include name, address, driver’s license, Social Security number, claim and benefits election data, date of birth, government identification number, financial account information, health-related information, and other personal information maintained in the ordinary course of business.
What We Are Doing
Although DOXA is continuing to review impacted data to identify any personal information affected by the incident, we are providing this notice so individuals can take steps to protect their identity and credit. Once DOXA completes its review and locates contact information for affected individuals, it will notify those individuals by letter to provide additional information.
If you believe your personal information was impacted, DOXA is offering complimentary ID theft protection and monitoring services provided by Cyberscout through Identity Force, a TransUnion company specializing in fraud assistance and remediation services. You can enroll by contacting 1-833-502-5554. When signing up for monitoring services, you may be asked to verify personal information to confirm and protect your identity.
As part of its commitment to cyber security, DOXA will continue to review this incident and take appropriate steps, as needed, to ensure its systems remain as secure as possible.
Please monitor this website for updates.
What You Can Do
In addition to remaining vigilant and enrolling in the complimentary monitoring services, you can take the precautionary steps listed below to protect your information or obtain additional information.
Additional Steps and Resources for Protecting Personal Information
Contact the nationwide credit-reporting agencies as soon as possible to:
- Add a fraud alert statement to your credit file at all three national credit-reporting agencies: Equifax, Experian, and TransUnion. You can contact one of the three agencies listed below and your request will be shared with the other two agencies. This fraud alert will remain on your credit file for 90 days.
- Place a “security freeze” on your credit accounts. A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. Please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit mortgages, employment, housing or other services. Under federal law, you cannot be charged to place, lift, or remove a security freeze. You must place your request for a freeze with each of the three major consumer reporting agencies: Equifax (www.equifax.com); Experian (www.experian.com); and TransUnion (www.transunion.com).
To place a security freeze on your credit report, you may send a written request by regular, certified or overnight mail to the addresses below. You may also place a security freeze through each of the consumer reporting agencies’ websites or over the phone, using the contact information below.
To request a security freeze, you will need to provide some or all of the following information to the credit reporting agency, depending on whether you do so online, by phone, or by mail:
- Your full name (including middle initial as well as Jr., Sr., II, III, etc.);
- Social Security Number;
- Date of birth;
- If you have moved in the past five (5) years, the addresses where you have lived over the prior five years;
- Proof of current address, such as current utility bill, telephone bill, rental agreement, or deed;
- A legible photocopy of a government issued identification card (state driver’s license or ID card, military identification, etc.);
- Social Security Card, pay stub, or W2;
- If you are a victim of identity theft, include a copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft.
The credit reporting agencies have one (1) to three (3) business days after receiving your request to place a security freeze on your credit report, based upon the method of your request. The credit bureaus must also send written confirmation to you within five (5) business days and provide you with a unique personal identification number (PIN) or password (or both) that can be used by you to authorize the removal or lifting of the security freeze. It is important to maintain this PIN/password in a secure place, as you will need it to lift or remove the security freeze.
To lift the security freeze to allow a specific entity or individual access to your credit report, you must make a request to each of the credit reporting agencies by mail, through their website, or by phone (using the contact information above). You must provide proper identification (including name, address, and social security number) and the PIN number or password provided to you when you placed the security freeze, as well as the identities of those entities or individuals you would like to receive your credit report. You may also temporarily lift a security freeze for a specified period rather than for a specific entity or individual, using the same contact information above. The credit bureaus have between one (1) hour (for requests made online) and three (3) business days (for request made by mail) after receiving your request to lift the security freeze for those identified entities or for the specified period.
To remove the security freeze, you must make a request to each of the credit reporting agencies by mail, through their website, or by phone (using the contact information above).
You must provide proper identification (name, address, and social security number) and the PIN number or password provided to you when you placed the security freeze. The credit bureaus have between one (1) hour (for requests made online) and three (3) business days (for requests made by mail) after receiving your request to remove the security freeze.
- Receive and carefully review a free copy of your credit report by going to www.annualcreditreport.com.
- Carefully review all bills and credit card statements for items that you did not contract for or purchase. Also review your bank account statements for unauthorized checks, purchases, or deductions. Even if you do not find suspicious activity initially, continue checking this information since identity thieves sometimes hold on to stolen personal information before using it. Remove your name from mailing lists for pre-approved offers of credit for approximately six months.
- Contact your local law enforcement or state attorney general if you suspect or know that you are the victim of identity theft.
- You can also contact the Fraud Department of the FTC. The Fraud Department will collect your information and make it available to law enforcement agencies.
- Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue
NW Washington, DC 20580
(877) 438-4338
- Obtain additional information about identity theft:
- All US residents: Obtain consumer assistance and educational materials on identity theft, privacy issues, and avoiding identity theft from the Federal Trade Commission (“FTC”) at www.ftc.gov, www.consumer.gov/idtheft, or by calling (877) 438-4338.
- California Residents: Visit the California Office of Privacy Protection (www.oag.ca.gov/privacy) for additional information on protection against identity theft. Office of the Attorney General of California, 1300 I Street, Sacramento, CA 95814, Telephone: 1-800-952-5225.
- Kentucky Residents: Contact the Office of the Attorney General of Kentucky at 700 Capitol Avenue, Suite 118 Frankfort, Kentucky 40601, www.ag.ky.gov, Telephone: 1-502-696-5300.
- Iowa Residents: Contact local law enforcement or the Iowa Attorney General’s Office to report suspected incidents of identity Theft: Office of the Attorney General of Iowa, Consumer Protection Division, Hoover State Office Building, 1305 East Walnut Street, Des Moines, IA 50319, (515) 281-5164, www.iowaattorneygeneral.gov
- Maryland Residents: Obtain information about steps you can take to help prevent identity theft from the Maryland Attorney General, 200 St. Paul Place, Baltimore, MD 21202, (888) 743-0023, marylandattorneygeneral.gov.
- New York Residents: Contact the following state agencies for information regarding security breach response and identity theft prevention and protection information: 1) New York Attorney General, (212) 416-8433 or https://ag.ny.gov/resources/individuals/credit-debt-lending/identity-theft; or 2) NYS Department of State’s Division of Consumer Protection, (800) 697-1220 or https://dos.ny.gov/consumer-protection
- North Carolina Residents: Obtain information about steps you can take to help prevent identity theft from the North Carolina Attorney General at: 9001 Mail Service Center, Raleigh, NC 27699, 1-877566-7226, www.ncdoj.gov.
- New Mexico Residents: You have rights under the federal Fair Credit Reporting Act (FCRA). These include, among others, the right to know what is in your file; to dispute incomplete or inaccurate information; and to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For more information about the FCRA, please visit. https://files.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf or www.ftc.gov.
- Rhode Island Residents: The Rhode Island Attorney General can be reached at: 150 South Main Street Providence, RI 02903, http://www.riag.ri.gov.
- Vermont Residents: Vermont residents may learn helpful information about fighting identity theft, placing a security freeze, and obtaining a free copy of your credit report on the Vermont Attorney General’s website at https://ago.vermont.gov/.
- Washington D.C. Residents: You can obtain additional information about the steps you can take to avoid identity theft from the DC Office of the Attorney General at https://oag.dc.gov/consumer-protection/consumer-alert-identity-theft. You may also contact the DC Office of the Attorney General at 400 6th Street NW, Washington, D.C. 20001; (202) 727-3400; and oag@dc.gov.
