People who received a Hippo Analytics letter dated October 30, 2026, including some who never did business with Hippo, were told that unauthorized users of Hippo’s online auto insurance quote tool may have viewed their names and driver’s license numbers between January 30, 2025 and August 11, 2026. No lawsuit or settlement has been reported, so there is nothing to claim; Hippo is offering free IDX monitoring through January 30, 2027.
What Happened?
Hippo Analytics Inc. reported a data security incident to the California Attorney General on November 3, 2026. According to its notice letter, Hippo identified suspicious activity involving its online auto insurance quote tool on August 3, 2026, and investigated with outside cybersecurity experts.The investigation found activity consistent with abuse of the quote tool by unidentified actors. Hippo says those actors submitted information through the tool and may have been able to view personal information returned by its pre-fill feature, which fills in details automatically, between January 30, 2025 and August 11, 2026, when Hippo says it fully fixed the problem. Hippo has not publicly said how many people were affected.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Why Non-Customers Got Letters
Hippo’s letter warns that a recipient “may be affected even if you have no relationship with Hippo.” Hippo says the people abusing the tool submitted information and could see what the pre-fill feature returned. That means the exposed records belong to whoever was looked up, not only to Hippo customers.The sample letter filed with the California Attorney General lists the name and driver’s license number as the information that may have been accessed.
What Hippo Says It Has Done
Hippo says it removed the affected feature from its public-facing application, released additional code updates to fix the issue and added technical controls to reduce the risk of a repeat. It is offering 12 months of IDX credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and fully managed identity theft recovery services at no cost. The enrollment deadline is January 30, 2027, and enrollment uses the code printed on each letter. The letter also describes how a free credit freeze works.Is There a Lawsuit?
No class action over the Hippo quote tool incident has been reported as of November 6, 2026, and there is no settlement or claim form. Any complaint would make allegations that Hippo could contest. OCA will update this page if one is filed.Questions
Why did I get a Hippo breach letter if I am not a Hippo customer?
Hippo’s letter says people may be affected even if they have no relationship with Hippo. The exposure came through the pre-fill feature of its online auto insurance quote tool, which returned information about people whose details were entered into the tool, not only Hippo customers.
What information was exposed in the Hippo breach?
The sample letter Hippo filed with the California Attorney General says the person’s name and driver’s license number may have been accessed. Hippo says there is no evidence the information has been misused.
What is the deadline to enroll in Hippo’s free monitoring?
Hippo’s letter sets an enrollment deadline of January 30, 2027 for 12 months of free IDX credit and CyberScan monitoring, which includes a $1,000,000 insurance reimbursement policy and identity theft recovery services.
Is there a Hippo data breach lawsuit or settlement?
No lawsuit or settlement over the Hippo quote tool incident has been reported as of November 6, 2026, so there is nothing to claim.
Sources
• California Attorney General, Submitted Breach Notification Sample: Hippo Analytics Inc. (reported November 3, 2026)• Hippo Analytics, “Notice of Data Breach” letter (PDF, filed with the California Attorney General)
