www.empowerins.com Listed by Dispossessor Ransomware Group

On September 13, 2022, insurance firm Empower Insurance (www.empowerins.com) appeared on the leak site of the Dispossessor ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company has not publicly quantified how many customers or employees are affected, and the leak-site posting does not detail the volume or specific categories of data stolen.

Primary Disclosure Details

The Dispossessor leak site lists Empower Insurance as a victim and publishes contact information for several of its employees, including Chief Operations Officer Cortez Maria, Agency Compliance Officer Morgan Jan, Test Software Development Engineer Jayakumar Prabhagaran, Marketing Representative Pelzer Rose, Agency Owner and Broker Fisher Bryan, and Litigation Adjusters Stallings Don and Faulkner Larry. Phone numbers and company email addresses for some of these individuals are displayed alongside the company name. The disclosure indicates that internal files were taken but does not specify what those files contained or how many records they represent. No ransom demand figure is published on the listing.

Why This Matters for You and Your Family

If you hold an insurance policy through Empower Insurance, your personal information may have been inside the stolen files. Insurance records routinely contain names, addresses, dates of birth, Social Security numbers, driver’s license details, and financial payment information. Even when exact record counts remain unknown, the exposure of internal files from an insurance provider creates concrete risk for policyholders and their households. A single breach like this can supply criminals with enough verified data to attempt tax fraud, loan applications, or medical identity theft in your name.

Doxxing and Identity-Chain Risks

Publishing employee contact details alongside the company breach turns a corporate incident into a personal one. The listed names, phones, and emails can be cross-referenced with public records, social-media profiles, and other leaks to map out family relationships and home addresses. Once attackers link an insurance customer’s policy data to an employee’s exposed contact information, they can build detailed dossiers. These chains often extend to spouses, children, and even gaming accounts that reuse the same email addresses or passwords. Credential leaks of this nature frequently cascade into account takeovers across email, banking, and online gaming platforms.

Dispossessor Group Track Record

Public reporting attributes Dispossessor with operating a double-extortion model: encrypting victim systems while simultaneously exfiltrating data for later publication if ransom is not paid. The group emerged in early 2022 and has targeted organizations across multiple sectors, typically gaining initial access through phishing or exploited remote desktop services. After exfiltration they post samples and contact information on their leak site, pressuring victims through both data exposure and the threat of further leaks. Their playbook relies on speed—listing victims within weeks of compromise—and on leveraging the fear of identity exposure rather than solely relying on file encryption.

What to do

• Run a DoxxScan to map every link between your emails, phones, handles, and real-world identity, then use the cleanup to remove what you can.
• Rotate any password you used at Empower Insurance or on any Empower-related account, and switch to a unique passphrase everywhere it was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches you or your family is flagged within hours.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become entry points when credential leaks chain together.
• Let DoxxScan remediation specialists manage takedown requests for any newly exposed personal records on data-broker and extortion sites.

The incident underscores that insurance-company breaches rarely stay contained to corporate servers; they quickly become household risks when names, contacts, and policy data surface together. Starting proactive defense now limits how far attackers can travel down the identity chain created by this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children’s gaming accounts vulnerable to credential-based takeovers.