United States
USA
NAIC PeopleSoft intrusion leads to data posted online; KBRA halts ratings data feed
The National Association of Insurance Commissioners identified unauthorized access to its PeopleSoft environment on or about June 11, 2026. NAIC later said data taken during the incident was published online. KBRA confirmed its unpublished ratings information submitted via NAIC’s regulatory data feed was exported and that it suspended its data feed to NAIC, while NAIC noted pauses to certain designations dependent on external rating feeds—causing supply-chain coordination disruption.
60
Estimated severity
60 / 100
92
Source reliability
92 / 100
Approximate Date
11/06/2026
Targeted Company
NATIONAL ASSOCIATION OF INSURANCE COMMISSIONERS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
KBRA (Upstream supplier)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Supply chain coordination disruptionOperational disruption
Affected sectors
Finance & Insurance
Affected departments
No information
Attack Profile
Attack types
Unauthorized accessData exfiltration
Attributed threat actors
No information
Sources
Incident Sources
content.naic.orghttps://content.naic.org/about/security-updatekbra.comhttps://www.kbra.com/publications/kXqMwXVk/kbra-statement-regarding-the-national-association-of-insurance-commissioners-naic-cybersecurity-incidentinsurancejournal.comhttps://www.insurancejournal.com/news/national/2026/06/24/875119.htminsurancejournal.comhttps://www.insurancejournal.com/news/national/2026/06/25/875334.htminsurereinsure.comhttps://www.insurereinsure.com/2026/06/24/the-naics-peoplesoft-breach-a-chronology-of-communicationsrepairerdrivennews.comhttps://www.repairerdrivennews.com/2026/06/30/naic-criticized-regarding-cybersecurity-event