Subj : Top auto insurance firm leaked over 5 million records - here's wh
To   : All
From : TechnologyDaily
Date : Wed Sep 24 2025 16:15:08

Top auto insurance firm leaked over 5 million records - here's what we know

Date:
Wed, 24 Sep 2025 15:07:00 +0000

Description:
ClaimPix kept an open database full of sensitive information.

FULL STORY
======================================================================ClaimPix
 exposed 5.1 million sensitive insurance files on an unsecured public 
database Documents included personal data, vehicle details, and internal 
company records ClaimPix restricted access and pledged code updates after 
researcher alerted them 

ClaimPix, a company which streamlines car insurance claims, was leaking 
sensitive customer data on the clearweb, including peoples phone numbers, and 
email addresses, an expert has warned. 

Security researcher Jeremiah Fowler, known for hunting down misconfigured and 
unprotected databases, recently found one such instance containing 5.1 
million files, sharing his findings with WebsitePlanet . 

The archive was 10TB in size, and included documents such as power of 
attorney, vehicle registration, estimates, repair invoices, and images of 
damaged vehicles with visible license plates and VIN numbers. ClaimPix leaks 

The data also included insurance documents with names, postal addresses, 
phone numbers, and emails, and registration documents with additional details 
about vehicles, but also internal documents with terms, fees, and other 
information that should not be available to the general public. 

Fowlers investigation led him to ClaimPix, a Hillside, Illinois technology 
company providing a self-service photo documentation platform to streamline 
insurance claims, damage assessments, and remote inspections. It covers 
multiple industries including insurance, car shipping, and contracting. 

ClaimPix is a relatively small, privately-held organization, that operates 
with fewer than 25 employees, and generates roughly $5 million in annual 
revenue. According to some sources , it processed more than 25,000 claims 
across the United States, and built partnerships with firms like Bluestar 
Corporate Relocation. 

Soon after Fowler reached out, the company restricted the database from 
public access, and apologized for the mishap. 

We have updated policies and our code to address this issue and will be 
making those changes live later this evening, ClaimPix told the researcher. 

A few details remain unknown: we dont know if ClaimPix operates this archive, 
or if the work is outsourced to a third party. We also dont know for how long 
it remained open, and if any threat actors accessed it before it was locked 
down. At press time, there was no evidence that the files were stolen or 
abused in phishing attacks. You might also like Data center firm leaks 
massive 38GB database containing thousands of personal records online Take a 
look at our guide to the best authenticator app We've rounded up the best 
password managers



======================================================================
Link to news story:
https://www.techradar.com/pro/security/top-auto-insurance-firm-leaked-over-5-m
illion-records-heres-what-we-know


--- Mystic BBS v1.12 A49 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.