Ransomware attack disrupts Nevada insurance division systems, investigation underway

Nevada’s Division of Insurance and several other state agency systems were taken offline following a ransomware incident identified on Aug. 24, state officials confirmed.

The Office of Emergency Management said in a statement that affected systems were immediately isolated and shut down to contain the attack. Restoration is underway in phases, with authorities stressing that security remains the top priority.

Investigators confirmed that some data was transferred outside of the state’s network, though the scope of the breach has not yet been determined. If personal information is found to be compromised, the state said it will notify affected individuals in line with Nevada law.

Despite the outage, health programs remain operational. Medicaid and public employee benefits are being processed, and provider payments continue without disruption. The Division of Insurance, however, is offering only limited services. Product compliance filings are still being accepted through the System for Electronic Rate and Form Filing, while paper complaints can be submitted at offices in Carson City and Las Vegas. Third-party licensing and company processes have not been impacted, though some phone systems remain down.

The Department of Business and Industry, which oversees the Division of Insurance, is maintaining public services where possible, with executive staff available by email.

The attack adds to a growing wave of cyber incidents targeting the insurance sector. In June, Aflac reported a breach that may have exposed Social Security numbers, insurance claims, and health data. Erie Insurance and Philadelphia Insurance Companies were also hit the same month by attackers linked to the same cybercrime group. In August, Farmers Insurance disclosed that more than 1 million customers were affected by a third-party vendor breach exposing personal and driver’s license information.

Nevada officials said the investigation into the ransomware incident is ongoing.