Latest / California / March 2021

Root Insurance Company

Root Insurance Company notified California AG on Mar 4, 2021 of a data breach, which occurred on Jan 28, 2021. Data exposed: Health insurance, Date of birth.

All 2 filings by Root Insurance Company, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Root Insurance Company
Source
California AG · source record
Date reported
Mar 4, 2021
Date(s) of breach
Thursday, January 21, 2021Thursday, January 28, 2021
Residents affected
Not published by this source
Data exposed
Health insurance Date of birth
Notice letter
Sample notice (PDF)
Discovered
Jan 28, 2021, as stated in the letter
"We identified an unusual account creation pattern on January 28, 2021, and now believe that activity began in the week before that date."
Days to notice
35 days from discovery (Jan 28, 2021) to the California record (Mar 4, 2021). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
Offered in the letter
12 months of credit or identity monitoring through Experian
First seen by BreachTally
2026-10-30 16:08 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:08 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Root Insurance Company

OrganizationSourceStateReportedResidents affectedData exposed
Root Insurance Company Oregon DOJ OR Feb 25, 2021 61,198 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.