Company Details
american-family-insurance
18,317
102,061
524
amfam.com
0
AME_1206532
In-progress


American Family Insurance Vendor Cyber Rating & Cyber Score
amfam.comFor more than 90 years, American Family Insurance has built its reputation on sound principles. We strive to provide you industry-leading service, exceptional claims experience and products that build long-term relationships. This is accomplished by treating policyholders fairly in a helpful and caring way and making it easy and convenient to work with us. We know our customers like family. American Family Insurance thrives by conducting its business in accordance with the highest ethical standards and the law at all times. Integrity is part of our culture and always has been. The reputation we enjoy and trust-based relationships we have built with our customers are determined by the example set by management and the character and good judgment exercised at all levels of our organization. It’s a way of doing business that our customers have come to expect from us and a standard that we continue to live up to. 1-800MYAMFAM (1-800-692-6326)
Company Details
american-family-insurance
18,317
102,061
524
amfam.com
0
AME_1206532
In-progress
Between 750 and 799

AFI Global Score (TPRM)XXXX

Description: American Family Insurance found anomalous behaviour in a section of their network. They immediately shut down a number of corporate systems and took preventative action to safeguard data and resources. In a statement, the business said. Experts from within and outside the company are involved in examining the behaviour. The organisation has not discovered any breaches in vital business, customer data processing, or storage systems, and some of our enterprise's operational components are still up and running.
Description: American Family Mutual Insurance Company was targeted by a cyber attack which was actually a data breach. The data which was accessed by the hackers was the Driving license numbers of the clients. They investigated the incident and took action, blocked the activity, and notify affected consumers.
Description: The Washington State Office of the Attorney General reported a data breach involving American Family Mutual Insurance Company, S.I. on May 13, 2021. The breach involved unauthorized access to the driver’s license numbers of approximately 5,246 Washington residents and occurred between February 6, 2021, and March 19, 2021, due to a cyberattack.


No incidents recorded for American Family Insurance in 2026.
No incidents recorded for American Family Insurance in 2026.
No incidents recorded for American Family Insurance in 2026.
AFI cyber incidents detection timeline including parent company and subsidiaries

For more than 90 years, American Family Insurance has built its reputation on sound principles. We strive to provide you industry-leading service, exceptional claims experience and products that build long-term relationships. This is accomplished by treating policyholders fairly in a helpful and caring way and making it easy and convenient to work with us. We know our customers like family. American Family Insurance thrives by conducting its business in accordance with the highest ethical standards and the law at all times. Integrity is part of our culture and always has been. The reputation we enjoy and trust-based relationships we have built with our customers are determined by the example set by management and the character and good judgment exercised at all levels of our organization. It’s a way of doing business that our customers have come to expect from us and a standard that we continue to live up to. 1-800MYAMFAM (1-800-692-6326)


At TATA AIG General Insurance, we wear our achievements like a badge of honour – proudly and with gratitude! We have been recognized as one of India’s Top 100 Best Companies to Work For and among the Top 25 Best Workplaces in BFSI in 2024. As a joint venture between the TATA Group and American Inte

Bajaj General Insurance Limited (formerly known as Bajaj Allianz General Insurance Company Limited) is one of India’s leading, most trusted and dynamic private general insurance companies. It is a subsidiary of Bajaj Finserv Limited, India’s leading and most diversified financial services group. Ba
💛 We're a leading Insurance, Wealth & Retirement business. 📣 Follow for #LifeAtAviva. Aviva is nothing without our people. Living up to our purpose to be with you today for a better tomorrow applies to those we work with just as much as it does to our customers. We want Aviva to be a pla

At QBE we’re driven by our purpose of enabling a more resilient future. QBE is an international insurer and reinsurer headquartered in Sydney, Australia, with local presence in 26 countries. We don't just see ourselves as an insurer, but a partner to our customers in helping to navigate uncertai

IAG is Australia and New Zealand's largest general insurance company with a purpose to make your world a safer place, whether you are a customer, partner, employee, shareholder or part of the communities IAG serves across Australia and New Zealand. Our businesses have helped people recover from nat
Humana will never ask, nor require a candidate to provide money for work equipment and network access during the application process. If you become aware of any instances where you as a candidate are asked to provide information and do not believe it is a legitimate request from Humana or affiliate,

Hi, we’re HUB. We advise businesses and individuals on how to reach their goals. When you partner with us, you’re at the center of a vast network of risk, insurance, employee benefits, retirement and wealth management specialists that bring clarity to a changing world with tailored solutions and un

Somos la empresa aseguradora multirramo 100% mexicana de mayor experiencia y solidez de nuestro país. Por más de 116 años hemos protegido a las familias mexicanas, respaldando sus sueños, historias, emociones y vivencias. Estamos orgullosos de formar parte de uno de los conglomerados empresariales
SBI Life Insurance (‘SBI Life’ / ‘The Company’), one of the most trusted life insurance companies in India, was incorporated in October 2000 & is registered with the Insurance Regulatory & Development Authority of India (IRDAI) in March 2001. Serving millions of families across India, SBI Life’s di
.png)
Here's how balances broke down by age, state, credit score and more.
Looking to save on home insurance? We analyzed data to find you the cheapest home insurance rates, companies and their potential discounts.
CNBC Select crowns the top providers in cost, coverage, customer satisfaction and more.
Homeonwners insurance costs have been on the rise in the last several years. The average annual premium jumped 24% between 2021 and 2024,...
Our healthcare data breach statistics clearly show an upward trend in data breaches since 2009, when OCR first started publishing data...
Car insurance rates in California are leveling off, but premiums in the Golden State are still more expensive than in much of the U.S..
If you're considering Zander's identity theft protection service, our guide explains all you need to know to see if Zander is right for you.
If you're considering Aura's identity theft protection service, our guide explains all you need to know to see if Aura is right for you.
Given McAfee mainly focuses on cybersecurity, it makes sense that its plans also focus on stopping identity theft through online security.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of American Family Insurance is http://www.amfam.com.
According to Rankiteo, American Family Insurance’s AI-generated cybersecurity score is 754, reflecting their Fair security posture.
According to Rankiteo, American Family Insurance currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, American Family Insurance has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, American Family Insurance is not certified under SOC 2 Type 1.
According to Rankiteo, American Family Insurance does not hold a SOC 2 Type 2 certification.
According to Rankiteo, American Family Insurance is not listed as GDPR compliant.
According to Rankiteo, American Family Insurance does not currently maintain PCI DSS compliance.
According to Rankiteo, American Family Insurance is not compliant with HIPAA regulations.
According to Rankiteo,American Family Insurance is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
American Family Insurance operates primarily in the Insurance industry.
American Family Insurance employs approximately 18,317 people worldwide.
American Family Insurance presently has no subsidiaries across any sectors.
American Family Insurance’s official LinkedIn profile has approximately 102,061 followers.
American Family Insurance is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.
No, American Family Insurance does not have a profile on Crunchbase.
Yes, American Family Insurance maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/american-family-insurance.
As of April 03, 2026, Rankiteo reports that American Family Insurance has experienced 3 cybersecurity incidents.
American Family Insurance has an estimated 15,377 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach, Cyber Attack and Vulnerability.
Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with blocked the activity, and communication strategy with notify affected consumers, and and and containment measures with shut down corporate systems, and communication strategy with public statement..
Title: American Family Mutual Insurance Data Breach
Description: American Family Mutual Insurance Company was targeted by a cyber attack which was actually a data breach. The data which was accessed by the hackers was the Driving license numbers of the clients. They investigated the incident and took action, blocked the activity, and notify affected consumers.
Type: Data Breach
Title: American Family Insurance Network Anomaly
Description: American Family Insurance detected anomalous behaviour in a section of their network. They immediately shut down a number of corporate systems and took preventative action to safeguard data and resources. Experts from within and outside the company are involved in examining the behaviour. The organisation has not discovered any breaches in vital business, customer data processing, or storage systems, and some of our enterprise's operational components are still up and running.
Type: Network Anomaly
Title: Data Breach at American Family Mutual Insurance Company, S.I.
Description: Unauthorized access to driver’s license numbers of approximately 5,246 Washington residents due to a cyberattack.
Date Detected: March 19, 2021
Date Publicly Disclosed: May 13, 2021
Type: Data Breach
Attack Vector: Cyberattack
Common Attack Types: The most common types of attacks the company has faced is Vulnerability.

Data Compromised: Driving license numbers

Systems Affected: Corporate Systems
Operational Impact: Some operational components are still up and running

Data Compromised: Driver’s license numbers
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Driving License Numbers, and Driver’s license numbers.

Entity Name: American Family Mutual Insurance Company
Entity Type: Insurance Company
Industry: Insurance

Entity Name: American Family Insurance
Entity Type: Insurance Company
Industry: Insurance

Entity Name: American Family Mutual Insurance Company, S.I.
Entity Type: Insurance Company
Industry: Insurance
Location: Washington State
Customers Affected: 5246

Containment Measures: blocked the activity
Communication Strategy: notify affected consumers

Incident Response Plan Activated: True
Containment Measures: Shut down corporate systems
Communication Strategy: Public statement

Type of Data Compromised: Driving license numbers

Type of Data Compromised: Driver’s license numbers
Number of Records Exposed: 5246
Sensitivity of Data: High
Personally Identifiable Information: Driver’s license numbers
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by blocked the activity, , shut down corporate systems and .

Source: Washington State Office of the Attorney General
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Washington State Office of the Attorney General.

Investigation Status: Ongoing
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Notify Affected Consumers and Public Statement.
Most Recent Incident Detected: The most recent incident detected was on March 19, 2021.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on May 13, 2021.
Most Significant Data Compromised: The most significant data compromised in an incident were Driving license numbers, and Driver’s license numbers.
Most Significant System Affected: The most significant system affected in an incident was Corporate Systems.
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident were blocked the activity and Shut down corporate systems.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Driving license numbers and Driver’s license numbers.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 530.0.
Most Recent Source: The most recent source of information about an incident is Washington State Office of the Attorney General.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.
.png)
Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services
Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.
A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.