Human In[Security] – Week of 2026-07-13

Today’s Menu (30-second skim)

• Millions of driver’s license numbers were exposed in an insurance company breach: Hackers stole names, insurance details, and millions of driver’s license numbers from an insurance company.
• 23andMe breach victims are set to get a $47 million payout: A judge approved a big payout after thieves got access to highly personal DNA and family information.
• Fake Booking.com reward emails are trying to steal traveler logins: Scammers are sending fake travel reward emails to trick people into handing over their Booking.com logins.

1) Millions of driver’s license numbers were exposed in an insurance company breach

What happened (plain English): An insurance company called AssuranceAmerica said hackers got into its systems and stole data on about 6.9 million people. The stolen information included names, contact details, driver’s license numbers, insurance policy details, and claim information. The company said the attack started through an employee account. It found the breach in March and later shared what kinds of data were taken. This was not just a list of emails. It included the kind of personal information criminals can use to pretend they know you.

Why it matters to you: A driver’s license number can help a criminal fake your identity or make a scam feel real. If they also know your insurance company, claim history, or contact info, they can call and sound convincing right away. One common scenario is a fake insurance worker who says there is a problem with your policy and asks you to confirm personal details. Another is a crook using your information to try opening accounts or passing identity checks somewhere else.

How to protect yourself (do this):

• If you get a breach notice, read it, save it, and follow any steps it recommends.
• Be suspicious of calls, texts, or emails about your car, insurance, or license that ask you to verify information.
• Check your credit reports, turn on account alerts, and freeze your credit if identity theft is a concern.

Published: 2026-07-08

Source: TechCrunch

2) 23andMe breach victims are set to get a $47 million payout

What happened (plain English): A judge approved a $46.75 million payout for people affected by the 23andMe data breach. The original breach exposed very personal information tied to DNA profiles and family connections. Hackers first got into a smaller number of accounts directly. Then they used the family link features inside the service to reach many more profiles. That meant a breach of a few accounts spread much further. It turned private family and genetic details into something strangers could browse and collect.

Why it matters to you: You can change a password, but you cannot change your DNA or your family history. Information like this can be used to build highly believable scams about health, relatives, or account problems. One realistic scenario is a fake support email that mentions family details to make you trust it. Another is identity fraud that uses a mix of personal facts to answer security questions or pressure family members.

How to protect yourself (do this):

• If you still use 23andMe, switch to a strong unique password and turn on two-factor authentication.
• Review what personal data is stored in DNA testing accounts and delete anything you no longer want online.
• Do not click first on emails or messages about family history, health results, or account trouble. Open the real site or app yourself.

Published: 2026-07-07

Source: BBC

3) Fake Booking.com reward emails are trying to steal traveler logins

What happened (plain English): Scammers are sending emails that look like they came from Booking.com and promise a $500 travel credit. The message tries to create urgency with a deadline and a big button that pushes people to click fast. Some of these emails may include a real name, which makes them feel more believable. But the sender address can still be fake, and the offer can still be a trap. The goal is simple: get you to hand over your login details on a fake page.

Why it matters to you: Travel accounts often store payment details, trip plans, and reservation information. If a scammer gets into one, they may change bookings, steal payment information, or send fake messages about your trip. One realistic scenario is a thief taking over your account and swapping reservation details so you pay the wrong place. Another is a fake reward link stealing your password and then using it anywhere else you reused it.

How to protect yourself (do this):

• Do not claim surprise rewards or fix reservation problems from links inside an unexpected email.
• Open the travel app or type the website name yourself to check whether the offer is real.
• Check the sender’s full email address, not just the display name, before trusting any travel message.

Published: 2026-07-06

Source: Fox News

Grandma’s Firewall

This week’s simple rule:

If a message uses your personal details or offers you money to make you act fast, slow down and verify it in the real app, real website, or real phone number you looked up yourself.

Two scripts you can steal:

• “I’m not using the link in this message. I’ll check my account by opening the real app or website myself.”
• “Thanks, but I never confirm personal information or payments from a surprise message. I’ll contact the company another way.”