Loading story…
Erie Indemnity Company disclosed in an 8-K filing that it detected unusual network activity and took systems offline to contain what it later identified as an information security incident. The outage disrupted core business operations, including customer-facing and internal services, and affected Erie Insurance’s ability to process claims, access policy information, and support routine communications while the company worked with law enforcement and external cybersecurity specialists.
Subsequent reporting said the incident caused prolonged business disruption across Erie Insurance’s network, with online systems and service channels remaining impaired as the company pursued containment and recovery. In a later public statement, Erie said it was continuing forensic investigation and remediation efforts, restoring systems in phases, and monitoring for potential impacts tied to the attack while advising customers and partners that service delays could continue during recovery.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Erie Insurance published a public statement providing an update on the information security incident and related network outage. The statement indicates the company was continuing response and recovery actions one month after the initial disclosure.
By mid-June, reporting indicated Erie Insurance was experiencing continued business disruption due to the cyberattack, affecting normal operations while response and recovery efforts were underway. This reflects the incident's operational impact beyond the initial outage disclosure.
Erie Indemnity Company disclosed in an SEC Form 8-K that it was experiencing a network outage caused by an information security event. The company said it had activated response protocols and was working to assess, contain, and remediate the incident.
4 references tracked. Mallory keeps watching after this page renders.
erieinsurance.com
Open sourcehipaajournal.com
Open sourcesec.gov
Open sourcesec.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
American Family Insurance confirmed that a cyberattack caused widespread IT outages after customers reported problems accessing systems and services. The insurer said it detected unauthorized activity in its network and took systems offline as part of containment and response efforts, disrupting parts of its business while it worked to investigate the intrusion and restore operations. Aflac later disclosed a separate cybersecurity incident affecting its environment, adding to concerns about cyber risk across the insurance sector. The company said it had activated incident response procedures and was assessing the scope and impact of the breach, while both disclosures underscored how attacks on major insurers can interrupt customer-facing services and trigger prolonged forensic and recovery efforts.
Jul 10, 2026
Erie Family Health Centers, a Chicago-area healthcare provider, disclosed a network intrusion that exposed sensitive personal information and protected health information for more than 570,000 individuals. The organization said an unauthorized third party had access to its network from **December 10, 2025, through January 27, 2026**, when suspicious activity was detected and an investigation began. Impacted data varied by person but included identifiers such as Social Security numbers, financial account information, online credentials, biometric data, and medical treatment, diagnosis, and other health records. Erie said it secured the affected network, brought in third-party digital forensics and cybersecurity experts, notified law enforcement, and reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights. The provider also said it strengthened security controls and is offering affected individuals complimentary credit monitoring and identity theft protection. No threat group had publicly claimed responsibility, and Erie had not disclosed attribution, the amount of data taken, or whether the intrusion involved a ransom demand.
Jun 29, 2026
A court issued a first-of-its-kind cyber insurance ruling blocking insurer **HSB** from applying a ransomware sub-limit to a claim tied to a 2022 ransomware incident at CiCi. The attack involved system encryption and threats to publish allegedly exfiltrated data; CiCi reported the incident via **At-Bay** (HSB’s agent), retained outside counsel and incident response firm **Arete Advisors**, and negotiated a ransom demand from **$2 million** down to **$400,000**. CiCi claimed total losses exceeding **$1.2 million** under a policy with a **$3 million** aggregate limit and **$50,000** retention. Separately, **Indiana University Health** sued **Change Healthcare** in U.S. federal court (District of Minnesota), alleging Change’s 2024 ransomware incident disrupted critical billing and payment operations and caused **$66 million** in damages. The filing underscores continued downstream legal exposure from ransomware-driven outages in healthcare supply chains, where third-party service disruptions can translate into large, quantifiable financial claims.
Jun 29, 2026