HealthConsent
Active breach tracker Texas Disclosed April 15, 2026 Part of illumifin TPA cluster

Liberty Bankers Life Data Breach 2026 (Illumifin Vendor Incident): 20,202 Policyholders Exposed. What To Do

Liberty Bankers Life Insurance Co., a Texas life and annuity carrier, disclosed in April 2026 that its third-party administrator Illumifin suffered a November 2025 network intrusion exposing names, Social Security numbers, financial information, and medical information for 20,202 Liberty Bankers Life policyholders (97,781 total across Illumifin's client portfolio). 1 to 2 years of identity monitoring offered. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated Sources & methodology

Timeline

Oct 28, 2025

Unauthorized actor accesses Illumifin (third-party administrator) network

Nov 4, 2025

Illumifin detects unusual activity; forensics engaged; law enforcement notified

Nov 10, 2025

Illumifin confirms client files copied (including Liberty Bankers data)

Jan 9, 2026

Illumifin notifies Liberty Bankers Life

Feb 25, 2026

Illumifin provides Liberty Bankers Life with list of affected individuals

Apr 15, 2026

Consumer notice letters mailed; HHS OCR + TX AG filings

Data exposed

01

High-risk identity

Enables financial + identity theft

Date of birth Social Security number

03

Contact & insurance

Phishing + targeted scams

Full name Home address Financial information Medical information Health insurance information
If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

01

Accept credit monitoring

It’s the floor of the response. Take it.

02

Freeze your credit

Free at Equifax, Experian, TransUnion.

03

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

04

Review your EOBs

Insurance statements catch medical identity theft early.

05

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

Liberty Bankers Life Insurance Co. is a Texas-domiciled life and annuity carrier under Liberty Bankers Insurance Group, marketing policies in approximately 47 states. This breach was not an attack on Liberty Bankers’ own systems — it occurred at Illumifin, a third-party administrator (TPA) that handles back-office operations for many life and annuity insurers including Liberty Bankers.

Between October 28 and November 4, 2025, an unauthorized actor accessed Illumifin’s network. Illumifin detected the activity on November 4, engaged forensics, and notified law enforcement. On November 10, 2025, Illumifin confirmed that client files including Liberty Bankers data had been copied. Illumifin notified Liberty Bankers on January 9, 2026 and provided the final affected-individual list on February 25, 2026. Liberty Bankers mailed consumer notices in April 2026, confirming 20,202 affected policyholders. The Illumifin incident in aggregate affected approximately 97,781 individuals across all Illumifin clients.

No threat actor has been publicly identified. No leak-site listing has been observed.

(Note: this is a distinct incident from the separate Landmark Admin breach (2024) that also affected Liberty Bankers Group customers — approximately 287,109 Texans of 806K total. That incident has spawned its own class actions in N.D. Tex. and is not within scope of this page.)

What was stolen

  • Full name, home address, date of birth
  • Social Security number
  • Financial information
  • Medical information
  • Health insurance information

The combination of SSN + DOB + financial information is a complete identity-theft toolkit and warrants aggressive defensive action.

What Liberty Bankers is offering

Complimentary identity-monitoring membership through Illumifin: 1 year for most enrollees, 2 years for higher-risk recipients. The specific credit-monitoring vendor brand was not disclosed in the public notices reviewed.

  • Call center: 877-431-5824 (Illumifin, Monday to Friday, Central time)

What to do

  1. Enroll in the offered monitoring through the activation code in your letter.
  2. Place free credit freezes at Equifax, Experian, and TransUnion.
  3. File IRS Form 14039.
  4. Watch your life insurance and annuity account statements for unauthorized policy changes or beneficiary updates.
  5. Stop the ongoing flow of your health and financial data. HealthConsent files HIPAA restriction requests and FTC HBNR deletion requests so the medical and demographic data exposed in this breach is not continuously re-shared.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.