State Farm

Summary

State Farm Mutual Automobile Insurance Company disclosed a data breach involving usernames and passwords for State Farm online accounts. During the attempted access, the malicious actor used username and password combinations against State Farm accounts and was able to receive confirmation of valid credentials; however, no sensitive information was accessed and no fraudulent activity occurred. State Farm has reset passwords to defend against this credential stuffing attack and recommends that affected users change their password.