SOUTHERN FIDELITY INSURANCE COMPANY – NOTICE REGARDING SECURITY BREACH
What is the Department of Financial Services, the Division of Rehabilitation and Liquidation, or Receiver?
The Department of Financial Services is the state agency responsible for overseeing a broad range of financial, insurance, consumer protection, and public safety functions in Florida.
When a Florida insurance company becomes insolvent, a court in Tallahassee, Florida can order it to be liquidated under a process called receivership. Under Florida law, the Department of Financial Services is the entity the court appoints to step-in, take possession of the insolvent insurer's property, liquidate its business, and pay its creditors to the extent possible.
The Division of Rehabilitation and Liquidation is a Division within the Department of Financial Services, and it plans, coordinates, and administers the receiverships of insolvent insurance companies on behalf of the Department.
Who is Southern Fidelity Insurance Company? I don't remember that name or I never went there.
Southern Fidelity was a property and casualty insurance company located in Tallahassee, Florida. It was authorized to write homeowners and commercial property insurance as well as inland marine, allied lines, fire, and other liability policies and was licensed in Florida, Louisiana, Mississippi, and South Carolina.
Southern Fidelity also included the business of Capitol Preferred Insurance Company.
Affected Individuals may have submitted personal information when applying for quotes, purchasing policies, or filing a claim.
When was the Department made Receiver of Southern Fidelity Insurance Company?
The Receivership Court in Tallahassee, Florida ordered Southern Fidelity into receivership on June 15, 2022, and appointed the Department of Financial Services to be its Receiver. You can view the Liquidation Order here: Order Appointing the Florida Department of Financial Services as Receiver for Purposes of Liquidation, Injunction, and Notice of Automatic Stay
Does the Department/Receiver operate Southern Fidelity as an insurance company while it is in receivership?
No. All of the insurance policies issued by Southern Fidelity were cancelled right after Southern Fidelity was ordered into receivership and the Department is liquidating Southern Fidelity's assets to pay creditors to the extent possible.
What happened?
The Department of Financial Services, Division of Rehabilitation and Liquidation is the court-appointed Receiver ("Receiver") of Southern Fidelity Insurance Company ("Southern Fidelity").
On April 28, 2025, the Receiver discovered suspicious activity on Southern Fidelity's off-site server networks and determined that the servers had been compromised by a ransomware attack. The Receiver promptly implemented system containment measures, including disconnecting the environment from the internet and isolating the affected servers. The Receiver engaged specialized forensic cybersecurity services to extensively investigate and confirm the nature and scope of the attack. The investigation determined that on April 25, 2025, an unauthorized actor accessed certain files on Southern Fidelity's servers.
When did this happen?
An unauthorized external actor accessed files on Southern Fidelity's off-site servers on April 25, 2025.
How many people were affected?
The personal information of approximately 2,568 individuals was affected.
I received a letter in the mail. Is this a scam?
The letter is legitimate and not a scam. The Receiver is committed to protecting individuals' security and privacy and takes this incident very seriously. The Receiver is offering all affected individuals free identity theft protection services through IDX, the data breach and recovery services expert.
We encourage you to contact IDX with any questions you have and to enroll in the free identity protection services by calling 1-833-788-9712 or by following the other enrollment options listed in the letter you received. IDX representatives have been fully versed on the incident and can answer questions or concerns. Representatives are available Monday through Friday from 9 am - 9 pm Eastern Time. The deadline to enroll in the free identity protection services is September 23, 2026.
I did not receive a letter stating that my information was compromised but feel that I should have. Can you help me?
The review of the data was extensive, and affected individuals with valid addresses were notified by letter mailed on June 23, 2026. You should contact IDX with any questions you may have by calling 1-833-788-9712. IDX representatives have been fully versed on the incident and can answer questions or concerns you may have. Representatives are available Monday through Friday from 9 am - 9 pm Eastern Time.
What personal information was exposed?
You should contact IDX by calling 1-833-788-9712 and they will be able to check your records and answer your questions and concerns. IDX representatives have been fully versed on the incident and can answer questions or concerns you may have. Representatives are available Monday through Friday from 9 am - 9 pm Eastern Time.
Was the information protected/encrypted?
No
Have the police or local authorities been notified? If so, which agency was notified and what is the case number?
The Receiver notified the FBI and Florida's Office of the Attorney General.
Why didn't you tell affected individuals about the loss of the data sooner?
As soon as the data breach was found, cybersecurity experts were engaged to determine the scope and impact of the event, identify the affected individuals and the information exposed, and line-up assistance services for affected individuals.
Has the information been misused? What are the risks of identity theft with the information that was exposed?
The personal information on Southern Fidelity's off-site servers was accessed by unauthorized external actors and posted on the dark web. While we have not identified specific instances of identity theft or fraud using the accessed information, this unauthorized access and publication creates a risk that the information could be misused for identity theft or fraud in the future. This is why we are providing free identity theft protection services through IDX to affected individuals. If your personal information was accessed, we strongly encourage you to enroll in these services by calling IDX at 1-833-788-9712 or following the other enrollment options listed in the letter you received and remain vigilant in monitoring your financial accounts and credit reports. The deadline to enroll is September 23, 2026.
How can I have my information removed from the server/directory?
Due to state and federal regulations, records must remain on file. However, the Southern Fidelity off-site servers were decommissioned and can no longer be accessed. Additionally, the Receiver has implemented increased cybersecurity protocols.
What is the Receiver of Southern Fidelity doing to prevent this kind of loss from happening again?
The Southern Fidelity servers were decommissioned and can no longer be accessed.
What is the deadline for registering for the pre-paid package of IDX identity protection services?
September 23, 2026
Is there anything I need to do in response to the exposure of my personal information?
Once you are enrolled in the free IDX identity theft protection plan, you may also take advantage of your rights to the free fraud alert services offered by the three major credit bureaus. Placing fraud alerts will provide your credit with additional protection. In addition, doing so will give you access to copies of each of your credit reports at no cost to you. The deadline to enroll with IDX is September 23, 2026.
Can my [spouse/child/family member/partner] also receive services?
The Receiver went through a rigorous and thorough forensics investigation to determine whose information was affected. You can contact IDX by calling 1-833-788-9712 and they can check to see if their information was involved. Services are only being offered to those affected. Representatives are available Monday through Friday from 9 am - 9 pm Eastern Time.
My [spouse/child/family member/partner] has passed away and I handle their affairs. Can you assist me regarding this letter?
You should contact IDX by calling 1-833-788-9712. IDX representatives have been fully versed on the incident and can answer questions or concerns you may have. Representatives are available Monday through Friday from 9 am - 9 pm Eastern Time.
Can I speak with someone directly at the Receiver of Southern Fidelity?
Statewide toll-free helpline: 1-877-MY-FL-CFO (1-877-693-5236)
Out of State Callers: (850) 413-3089.
I am with (Media); can you provide me with further information about the recent data breach with the Receiver of Southern Fidelity Insurance Company?
You can contact the Department's communications office at Communications@MyFloridaCFO.com