What happened
In January 2026 the rental-car and travel insurer Prosura (which also trades as “Hiccup”) confirmed a cyber incident after an alleged threat actor began contacting its customers [pro-cyberdaily]. Based on its initial assessment, Prosura said personal and policy information may have been involved, including contact details, travel destinations, billing and pricing information and policy dates [pro-ib], and that claim data, including driver’s licences and related images, may also have been compromised [pro-cyberdaily]. Prosura said it had no indication that payment or credit-card information was accessed [pro-cyberdaily]. Prosura notified the Australian Cyber Security Centre and the OAIC [pro-vroom].
Timeline
- 2026-01-03 — Incident identified; Prosura temporarily disabled self-service functions and engaged external cyber experts [pro-vroom], [pro-cyberdaily], [pro-ib]. The alleged attacker claims access from 1 January; that is unconfirmed.
- 2026-01 — Prosura publicly confirmed the incident after the alleged attacker contacted victims; Prosura notified the ACSC and OAIC [pro-cyberdaily], [pro-vroom].
Current status
Disclosed. The person(s) claiming responsibility contacted victims and, according to a sale listing, offered the data for sale; those are claims made by the alleged attacker and are not asserted here as fact [pro-cyberdaily]. No regulator action has been reported. Prosura has not published a count of people affected, so no figure is asserted.
Why it matters
Travel and rental-car insurance records combine identity and travel-pattern data, and claim files can hold driver-licence images — exactly the material used for identity fraud.