Landmark Admin data breach: what happened and what to do
Landmark Admin, a Texas administrator for life insurance companies, said an attacker was in its network between May 13 and June 17, 2024. It first reported about 800,000 people affected, and a later filing put the total near 1.6 million. Names and Social Security numbers were exposed.
View all 13,177 breaches- Breach date
- 13 May 2024
- Made public
- 23 Oct 2024
- Affected
- 1,600,000
- Data exposed
- Names, Social security numbers, Tax identification numbers, Driver's licenses, Passport numbers, Bank account numbers, Medical information
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
Most policyholders have never heard of Landmark Admin. It's a third-party administrator in Brownwood, Texas, that handles paperwork and records for life insurance carriers. When a company like that is breached, the people affected are customers of the insurers behind it, not customers of Landmark itself.
What happened
Landmark's notice says it saw suspicious activity on its system on or about May 13, 2024. On May 14 it learned that an unauthorized third party had tried to get into its network. Its investigation covered a cybersecurity incident involving the network between May 13 and June 17, 2024.
Landmark filed notice with the Maine Attorney General on October 23, 2024, reporting about 800,000 people affected (806,519). A later Maine filing raised the number to 1,613,773, almost double. That filing was described as preliminary, so the total could move again. State AG listings such as Washington's count only that state's residents, which is why one listing can show a far smaller figure, such as 11,691.
Sources checked: mass.gov, dojmt.gov, therecord.media
Last verified against the official page:
What was exposed
Landmark said the information involved differs from person to person. Reports of the notice say it included:
- Names
- Social Security numbers
- Tax identification numbers
- For some people: driver's license numbers, passport numbers, bank account information and medical information
If you hold or held a life insurance policy or annuity, check whether your insurer uses a third-party administrator.
What this lets criminals do
A name and a Social Security number open the door to a lot of identity theft, from fraudulent credit applications to false tax returns. Insurance records add a second problem. Someone who knows you have a life insurance policy or annuity can pose as you or as your insurer, try to change a beneficiary or request a payout, or run a scam that quotes real policy details.
What the company said
According to the state filings, Landmark notified regulators and mailed letters to the people whose data was involved. Its Massachusetts and Montana filings include a copy of the consumer letter, which spells out what was involved for each person. Companies in this position often offer credit monitoring. The terms are in the letter. Check yours.
What to do now
If a Social Security number was involved, freeze your credit and keep the letter. Insurance fraud is slow. A changed beneficiary or a quietly opened account may not show up for months. So keep looking. Check your credit reports a few times a year, and read any mail about a policy you don't recognize. If you hold a life insurance or annuity policy, contact your insurer using a number from your policy documents and ask whether it can add extra verification before changes or payouts.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A credit freeze stops anyone from opening new credit in your name. It's free and takes about 10 minutes at each of Equifax, Experian and TransUnion. You can lift it for a day when you apply for a loan. This is the main protection if your Social Security number was in the letter.
- 2
Contact your life insurer using the number on your policy
Ask whether it can add extra verification before beneficiary changes, address changes or payouts.
- 3
Check your credit reports
Free reports are available at AnnualCreditReport.com. Look for accounts or inquiries you don't recognize.
- 4
Be wary of calls and emails about your policy
Criminals may quote real policy details. Don't give out your Social Security number or bank details to anyone who contacts you first.
- 5
Use the monitoring offer in your letter, if there is one
Check your letter for what it offers and how to enroll. Keep the letter for your records.
- 6
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus monitors breach databases and the dark web and alerts you when your data appears, so you hear about the next one early.
Official filings
- Washington Attorney General , filed 11 Apr 2025 : 11,691 people
- Washington Attorney General , filed 23 Oct 2024 : 4,795 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to the Washington Attorney General
-
Reported to the Washington Attorney General
Frequently asked
Who is Landmark Admin?
A third-party administrator in Brownwood, Texas, that handles records for life insurance companies. You may not have dealt with Landmark directly.
How many people were affected?
Landmark first reported about 800,000 people. A later Maine filing raised that to 1,613,773, described as preliminary.
What was exposed?
Names, Social Security numbers and tax identification numbers, plus driver's license, passport, bank account or medical information for some people.
Was I affected by the Landmark Admin breach?
Landmark mailed letters to affected people. If you have life insurance or an annuity, watch for a letter that names your insurer.
Sources
- mass.gov/doc/assigned-data-breach-number-2024-1212-landmark-admin-llc/download
- dojmt.gov/wp-content/uploads/Consumer-notification-letter-1508.pdf
- Landmark, an administrator for insurance firms, says 800,000 affected by data breach ยท therecord.media
- Search Data Security Breaches | State of California - Department of Justice ยท oag.ca.gov
Something wrong or out of date? Tell us and we'll re-check it.
What changed
- Page text rewritten in plainer language; no facts changed.