Got a notice from The Society of Certified Insurance Counselors Inc dba Risk and Insurance Education Alliance? Here’s what to do.

Your checklist

1. 1

   Keep the letter

   Save the notice from The Society of Certified Insurance Counselors Inc dba Risk and Insurance Education Alliance and its envelope. The date you were told can matter for legal deadlines.

2. 2

   Freeze your credit

   The filing does not list what was taken, so play it safe. A free freeze at Equifax, Experian and TransUnion stops new accounts being opened in your name.

3. 3

   Change reused passwords

   Change any password you used with this company or reused elsewhere, and turn on two-factor sign-in.

4. 4

   Get a free claim review

   Our legal team checks whether you can be paid for this breach. No fee unless you recover.

About the The Society of Certified Insurance Counselors Inc dba Risk and Insurance Education Alliance breach

Reported to

Nebraska Attorney General

Date filed

November 20, 2025

People notified

Not stated

Cause in filing

Not stated

The Society of Certified Insurance Counselors Inc, doing business as the Risk and Insurance Education Alliance, operates as a prominent professional development, continuing education, and certification provider within the insurance and risk management sector. The organization serves thousands of insurance agents, brokers, risk managers, and corporate professionals by offering rigorous designation programs, such as Certified Insurance Counselor (CIC) and Certified Risk Manager (CRM). Because of its central role in professional credentialing and training, the Alliance routinely collects, processes, and stores vast quantities of highly sensitive personal and professional data. This information includes detailed member profiles, professional licensing records, payment details, and employment histories, all of which are essential for managing educational tracking, testing results, and continuing education credits. In 2025, the organization reported a significant security incident to the Nebraska Attorney General, alerting members and industry professionals to a breach of its digital network infrastructure. In the insurance and education sectors, incidents of this nature frequently involve sophisticated cyberattacks, such as unauthorized network intrusions, targeted malware deployment, or vulnerabilities exploited within third-party vendor platforms. Educational and professional associations like the Risk and Insurance Education Alliance maintain centralized databases containing both historical and active participant records, making them attractive targets for malicious actors seeking to harvest valuable personally identifiable information for financial gain or credential-related fraud. The exposure resulting from this breach likely compromises multiple categories of sensitive data, each carrying severe downstream risks for affected individuals. Exposed records may include full legal names, dates of birth, Social Security numbers, home and business addresses, banking or credit card details used for course registration, and professional license or certification identifiers. When Social Security numbers and birth dates are compromised alongside professional credentials, victims face an elevated risk of identity theft, fraudulent credit applications, tax fraud, and unauthorized account takeovers. Furthermore, the inclusion of professional licensing and financial data leaves victims vulnerable to targeted spear-phishing campaigns and specialized financial scams designed to exploit their standing in the insurance industry. As a custodian of professional and consumer data, The Society of Certified Insurance Counselors Inc dba Risk and Insurance Education Alliance is bound by strict legal obligations to safeguard the information entrusted to its care. Under state consumer protection statutes, including the Nebraska Consumer Protection Act, and applicable federal standards enforced by the Federal Trade Commission, organizations holding sensitive personal data must implement robust administrative, physical, and technical safeguards. The occurrence of a data breach of this scale strongly suggests potential failures in maintaining adequate cybersecurity measures, such as outdated encryption protocols, inadequate network segmentation, or insufficient vulnerability monitoring, which may constitute a breach of statutory and common-law duties. Receiving an official data breach notification letter from the Risk and Insurance Education Alliance serves as formal legal acknowledgment that your personal information was compromised due to inadequate security controls. Under the law, receipt of this notice establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the organization accountable for its security lapses. Affected individuals do not need to prove that financial fraud has already occurred to seek legal recourse and demand remedies such as credit monitoring services and financial compensation. Our firm evaluates and pursues these data breach class action cases on a contingency fee basis, meaning you pay no out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.

Other notices sent in Nebraska

• Waddell and Associates LLCNebraska Attorney General · Filed date pending
  Count not stated
• Malin and Goetz IncNebraska Attorney General · Filed August 3, 2026
  Count not stated
• ESS MetronNebraska Attorney General · Filed August 3, 2026
  Count not stated
• Lehighton Area School DistrictNebraska Attorney General · Filed August 3, 2026
  Count not stated
• Neon One LLCNebraska Attorney General · Filed July 31, 2026
  Count not stated
• Pathfinder LL and D Insurance GroupNebraska Attorney General · Filed July 31, 2026
  Count not stated