The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
New York regulators announced $11.3 million in penalties on November 25, 2024 against GEICO and The Travelers Indemnity Company after separate compromises of automobile-insurance quoting systems. State officials said information belonging to more than 120,000 New York residents—including driver’s-license numbers and dates of birth—was exposed.
This was not one joint breach, and it was not a new 2026 fine. GEICO’s incidents affected approximately 116,000 people, while a separate Travelers incident affected about 4,000. Some exposed driver’s-license information was later used in fraudulent unemployment-benefit claims, but the public findings do not say that every affected person suffered identity theft or financial loss.
What New York announced
The New York Department of Financial Services (DFS) and Attorney General Letitia James announced separate settlements with the two insurers on November 25, 2024.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Company | Total penalty | DFS portion | Attorney General portion | Residents affected |
|---|---|---|---|---|
| GEICO | $9.75 million | $5 million | $4.75 million | Approximately 116,000 |
| Travelers | $1.55 million | $1.2 million | $350,000 | Approximately 4,000 |
| Total | $11.3 million | $6.2 million | $5.1 million | More than 120,000 |
The payments are regulatory penalties, not an announced automatic cash payment to each affected customer. The settlements also impose continuing security and governance obligations.
#1 Best Overall
- 【RFID Protection】This women's RFID-blocking wallet features advanced technology to protect your personal information from electronic theft, keeping you safe while traveling or on the go
- 【Compact Design】This slim women's wallet is perfect for those who prefer minimalist designs. Its compact size lets you carry all your essentials without bulk, making it ideal for everyday use
- 【Spacious Capacity】With room for 9–11 cards, this wallet holds all your essential credit cards and IDs while staying slim. The inner pockets also provide extra storage for cash and additional cards
- 【Quality Craftsmanship】Made from premium leather and aircraft-grade aluminum, this women's wallet combines durability with elegance. Its carefully crafted design ensures both style and long-lasting use, making it a reliable everyday accessory
- 【Perfect Gift Choice】Whether for birthdays, graduations, valentine’s day, anniversaries, or other special occasions, this leather women’s wallet comes elegantly packaged—a thoughtful gift for wife, girlfriend, mother, daughters or loved ones who appreciate quality and style.
What happened at GEICO
According to the GEICO consent order, attacks began in or around November 2020 and involved more than one quoting system.
- A public-facing online quoting website exposed New York driver’s-license numbers because sensitive information was not sufficiently protected in the site’s back end.
- DFS had warned insurers about campaigns targeting driver’s-license information through online quoting applications. Regulators concluded that GEICO’s reviews of prior incidents and industry warnings were not comprehensive enough to prevent or detect later attacks.
- After the consumer website was remediated, attackers exploited a separate quoting tool used by agents. That agent platform accounted for the vast majority of the approximately 116,000 affected New Yorkers.
- GEICO did not discover at least one later event until attackers tried to ransom stolen data and another person explained how it had been obtained.
Some of the exposed license information was subsequently used to submit fraudulent New York unemployment claims. That establishes misuse of some data, not identity theft for every person in the affected population.
Rank #2
- SECURE YOUR WALLET FROM e-PICKPOCKETING: Prevent potential identity and financial theft through your contactless cards. Don’t become a victim e-theft in our growing contactless society. This is the simplest and most effective prevention solution! Block all RFID and NFC signal to secure your details and have peace of mind.
- JAMMING CHIP: An antenna and jamming chip makes up the main components of the card. The antenna will sense incoming radio waves and draw power for the chip to create a jamming signal. Lifetime usage as the card does not require battery.
- BROAD WORKING DISTANCE: A large working distance of 2.4” provides complete protection for your whole wallet. Cards 1.2” either side of the card will be fully secure from e-pickpocketing.
- ULTRA-THIN & COMPACT: At the size of a standard credit card and at only 0.03” thick, the card will fit into any wallet, purse or card case. Keep your wallet compact with no added bulk from this card. Best for travel, business, and everyday use.
- TEST THE CARD: Test the card is working at your local supermarket. At the self-service checkout machines, combine the card and a contactless card on the payment reader. Payment with the contactless card will be blocked and an error message should occur on the reader.
What happened at Travelers
Travelers’ case involved a separate portal used by independent insurance agents. The Travelers consent order says:
- Attackers entered the portal in April 2021 using compromised agent credentials.
- The portal was password protected, but it lacked multifactor authentication or equivalent compensating controls.
- Users could generate reports displaying consumers’ full driver’s-license numbers in plain text.
- Travelers had received multiple industry warnings between January and April 2021 about attacks against insurance-quoting tools.
- The company did not detect the compromise for more than seven months; a third-party prefill-data provider alerted it.
Approximately 4,000 New York residents were affected. The available announcement identifies driver’s-license numbers and dates of birth as the key exposed information; it does not establish that Social Security numbers, payment-card data, medical records, or passwords were involved.
Rank #3
- Slim and Thin Wallet - This minimalist bifold wallet measures 4.3x3.2x0.6 inches and stores up to 15 cards. The bifold wallet perfectly fits in your pocket and is well-suited for everyday carry
- Elite Features - 2 ID windows (DL & Other ID Cards) and 2 quick slots allow for quick access during travel, shopping or work. With 15 card slots and 2 more slots behind them, it is easy to carry all your important cards,cash and bills, meet all your daily needs
- RFID Blocking- Our wallets are equipped with advanced RFID SECURE Technology, a unique metal composite, engineered specifically to block 13.56 MHz or higher RFID signals and protect the valuable information stored on RFID chips from unauthorized scans.License and ID cards will be protected effectively. No more worrying about unauthorized scans during travel, shopping, or daily commuting!
- Durable Surface - Our leather wallets are pressed with high quality 3 layers leather, which is more durable than 2 layers leather wallets. The surface of the leather is made more scratch-resistant by special treatment, which can effectively prevent small scratches caused by keys and buttons in life
- Gifts for him - The thin wallet comes in classy gift packaging. It is a perfect present for birthdays, anniversaries, Father's Day, Valentine's Day, Christmas and other special occasions, so you can easily gift it to someone you love
Why regulators said the controls were inadequate
DFS applied New York’s cybersecurity framework, 23 NYCRR Part 500, which requires covered financial-services companies to maintain safeguards for nonpublic information and information systems. The regulation took effect in 2017 and was amended in 2023; the settlements concern conduct and investigations tied primarily to the earlier framework.
The cases illustrate several failures regulators commonly examine:
Rank #4
- RFID Blocking Technology: This credit card holder is made of aluminum shells and ABS plastic, designed with RFID-blocking technology to help protect your credit, ID, debit, and driver's license cards from unauthorized scanning
- Slim Compact: Slim and compact design measures 4.3 x 3 x 0.86 inches, ideal for front pockets or purses
- Card Organizer: With 7 accordion-style slots, this wallet can hold up to 10 standard credit cards or over 20 business cards
- Artistic Expression: Features a variety of artistic designs on the aluminum shell, inspired by famous paintings, flowers, and animals, to complement your personal style
- Thoughtful Gift Idea: Makes a thoughtful gift for any occasion, combining functionality and style
- Access control: Agent and vendor accounts could expose more information than was necessary for the work.
- Authentication: Travelers’ portal did not require MFA, increasing the impact of stolen credentials.
- Data protection and minimization: Full license numbers appeared in plain-text reports.
- Monitoring: Logging and alerting did not identify unusual access or report generation quickly enough.
- Threat intelligence: Industry warnings were not translated into timely, comprehensive defensive action.
- Incident response: Post-incident reviews and detection processes did not consistently uncover related attacks.
The issue was therefore not simply that a breach occurred. Regulators found that the insurers had not maintained appropriate preventive, detective, and response controls.
What the settlements require
The Attorney General’s settlements require both companies to maintain comprehensive information-security programs, inventory private information, protect that information with appropriate safeguards, use reasonable authentication procedures, operate logging and monitoring capable of identifying suspicious activity, and improve threat-response procedures. See the Attorney General’s announcement.
Best Value
- GENUINE LEATHER: Precious Genuine Vegetable Tanned Cowhide Leather with nice and smooth texture, really soft & comfortable to touch. Vegetable tanned Leather is a luxury leather. It uses natural ingredients instead of chemicals, so it is environmentally friendly.
- ELITE FEATURES: 2 ID windows (DL & Other ID Cards) allow for quick access when traveling or at the store /working place. With 8 card slots and 2 more slots behind them, it’s easy to carry all your important cards, meet all your daily needs.
- RFID BLOCKING SECURITY: Our wallets are equipped with advanced RFID SECURE Technology, a unique metal composite, engineered specifically to block 13.56 MHz or higher RFID signals and protect the valuable information stored on RFID chips from unauthorized scans.
- COMPACT DESIGN: Making this bifold superb for travel, and everyday use, keeping cards safe and organized! It holds 10+ cards, and lots of cash!
- GIFT BOX PACKING: It is one of the most special gifts for Groomsmen, Birthdays, Anniversaries, Father's Day, Christmas and other Special Occasions.
DFS added company-specific work:
- GEICO: a comprehensive cybersecurity risk assessment and penetration testing, followed by an action plan addressing identified concerns.
- Travelers: a review of systems and access controls and improved protections against unauthorized access to nonpublic information.
What affected consumers should do
Use the individual notice from the insurer or its notification administrator to confirm whether you are included and what services, if any, are available. Regardless of whether you received a notice, these steps are reasonable when a driver’s-license number may be exposed:
- Check official communications. Contact GEICO or Travelers through a policy document or their official website, not a link or phone number in an unsolicited message.
- Review all three credit reports. Use AnnualCreditReport.com and look for unfamiliar accounts, inquiries, or addresses.
- Consider a credit freeze. Place freezes directly with Equifax, Experian, and TransUnion. A freeze is free and helps block many new-credit applications, but you must temporarily lift it when legitimate lenders need access.
- Consider a fraud alert. It is less restrictive than a freeze and asks businesses to take additional identity-verification steps when credit is requested.
- Watch beyond credit. Monitor unemployment-benefit accounts, tax notices, bank and email accounts, and messages asking for identity documents. A stolen license number can be misused even when the physical license remains with you.
- Report suspected identity theft. Follow the recovery plan at IdentityTheft.gov and contact the relevant state agency or financial institution through an official channel.
A freeze is preventive, while monitoring is mainly detective. Paid services such as Aura, Norton LifeLock, or Experian IdentityWorks may add alerts or restoration help, but they do not undo the original exposure and may not cover unemployment, tax, phishing, or account-takeover risks. Compare the plan’s actual coverage before paying; free freezes, fraud alerts, and government recovery tools may be sufficient.
Why agent portals matter
These cases show why an insurer’s public customer website is only one part of its attack surface. Independent-agent portals, prefill-data providers, vendors, and reporting tools can hold the same sensitive information and may be less visible to customers. Effective security requires least-privilege access, MFA, masked or tokenized data, limits on bulk exports, and alerts for unusual report generation—not just a password on the front door.
The enforcement also signals that New York regulators may examine whether companies acted on threat warnings, tested connected systems after an incident, and investigated the underlying cause rather than fixing only the first visible vulnerability. The DFS insurance-enforcement index shows this action as part of a broader focus on the insurance sector.
The bottom line
New York’s $11.3 million action was announced in 2024 and covers separate GEICO and Travelers incidents that primarily occurred from late 2020 through 2021. More than 120,000 New York residents had driver’s-license or related information compromised, but the public findings do not say everyone experienced identity theft. Check your own notice, review credit and benefit activity, and use a freeze or fraud alert if the risk warrants it.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
