USAA system breach exposes personal data of over 32,000 customers nationwide

A recent internal system breach has compromised the personal data of more than 32,000 USAA customers across the United States, according to a notice filed by USAA Chief Privacy Officer Jeff Kennedy with the Maine Attorney General’s Office. The breach affected approximately 4,200 customers in Texas and 32,276 nationwide, including sensitive personal details such as names, Social Security numbers, driver’s license numbers, government-issued identification numbers, medical information, and birthdates.

The breach occurred on April 13, 2024, during a routine update to USAA’s document delivery system. The error was discovered on April 30, 2024, and an internal investigation concluded on July 31. In a mailed notice sent to affected customers on August 27, USAA, a San Antonio-based insurance and banking company, explained that certain documents for members with property and casualty insurance products were mistakenly posted to other members’ online accounts. Upon learning of the breach, USAA immediately removed the documents and launched an investigation.

As part of its mitigation efforts, USAA offers impacted customers a two-year membership with Experian IdentityWorks to help prevent identity theft. The company has also encouraged those who suspect fraudulent activity to contact USAA at 877-762-7256. USAA has not disclosed how many individuals were directly impacted by this latest breach.

This incident follows a similar breach in June 2023, when USAA notified over 2,700 Texans that their information had been exposed between December 2022 and May 2023. That breach involved call center representatives employed by a third-party service who improperly shared their USAA access credentials with unauthorized individuals.