About Goosehead Insurance Agency, LLC
Goosehead Insurance Agency, LLC, based in Westlake, Texas, experienced a data breach that impacted certain individuals, including residents of Maine. The breach was an external system hacking incident that compromised personal information such as names, Social Security numbers, and financial account information. The breach occurred on March 6, 2025, but was not discovered until September 26, 2025. Affected individuals were notified on October 10, 2025.
What Happened
On or about March 13, 2025, Goosehead became aware that certain files in its systems, servers, and workstations were encrypted. Goosehead launched an investigation and learned that between March 6, 2025 and March 13, 2025, an unauthorized actor accessed certain systems within Goosehead’s environment, and downloaded files from those systems. Although Goosehead has no evidence of any identity theft or fraud occurring in connection with this incident, Goosehead conducted a review of the files copied to confirm the information contained therein, and to whom it relates for purposes of providing notice.
The breach affected a number of individuals by compromising sensitive information. The breach occurred on March 6, 2025, and was discovered by the company on September 26, 2025.
Next Steps
Affected individuals should stay vigilant by monitoring their account statements and free credit reports for any suspicious activities. Goosehead has notified federal law enforcement and is implementing additional security measures and employee training. Individuals are also encouraged to report any incidents of fraud or identity theft to the Federal Trade Commission, their state Attorney General, and law enforcement.
Identity Theft Protection Services
Although identity theft protection services were not directly offered by Goosehead, the company provided guidance on how to protect against identity theft and fraud. This includes placing a fraud alert and security freeze on credit files, obtaining a free credit report, and staying alert for any signs of identity theft. Goosehead also communicated with major credit reporting agencies to ensure proper notification procedures are followed.