A ransomware group calling itself Storm claims to have obtained data from Supportive Insurance Services, according to a listing posted on the group’s own leak site. The claim is dated August 10, 2026, and was identified by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. As of this writing, Supportive Insurance Services has not issued any public confirmation of an incident, and no regulator has confirmed the claim. This report describes only what the group has stated on its site; it is not independent proof that a breach occurred.
What we know — and don’t
- A group calling itself Storm listed Supportive Insurance Services on its leak site with a claimed date of August 10, 2026.
- Supportive Insurance Services operates in the finance sector, specifically insurance services.
- The specific types of data the group claims to have obtained have not been disclosed in the listing and have not been confirmed by the company or any independent party.
- No regulatory filing or official statement from Supportive Insurance Services has been identified confirming this claim as of publication.
- Claims made on ransomware leak sites are statements by criminal actors and are not verified evidence of an actual compromise.
What should you do if you have an account with this company?
- Change your password for any account with Supportive Insurance Services, and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) wherever it is offered, particularly on email, banking, and insurance-related accounts.
- Be alert to phishing attempts — unexpected emails, texts, or calls referencing this company or asking you to verify account details should be treated with suspicion.
- Review recent account activity and statements for anything unfamiliar, and report discrepancies to the company directly through verified contact channels.
- Consider signing up for an identity monitoring service like a service like Aura or LifeLock to get alerted if your personal information appears somewhere it shouldn’t.
- Keep records of any suspicious communications in case they are needed later for reporting to authorities or the company.
BreachLetter will update this page if Supportive Insurance Services confirms this incident, issues a public statement, or if the matter is officially reported to regulators.