Cypress Insurance

Profile narrative

Cypress Insurance, also known by the alias Cypress Insurance, is a workers compensation insurance company headquartered in San Francisco, California, and operates within the United States of America. The entity was named as a defendant in a federal lawsuit filed in Los Angeles that accused several insurers of illegally accessing confidential workers compensation claim files. The lawsuit alleges that Cypress Insurance, together with other insurers, participated in a scheme to obtain attorney‑client privileged documents through unauthorized computer access.

The alleged targeting focused on the workers compensation sector, specifically the personal data of injured workers and their legal representatives in California. According to the complaint, the insurers directed the hacking efforts to gain a litigation advantage and to reduce financial exposure from judgments and settlements, indicating a financially motivated objective rather than espionage or disruption. The geographic scope of the activity is limited to California, where the compromised files were stored and accessed.

Reported tactics described in the lawsuit involve private investigators hired by the insurers gaining unauthorized entry to attorney‑client databases and downloading workers compensation files containing Social Security numbers, birth dates, home addresses, medical information and other confidential details. One investigator admitted to downloading over 33,000 workers compensation files, and the complaint notes that the hacking occurred over several years by accessing servers that housed the privileged data, including information allegedly obtained from the HQSU website where client data was maintained. No specific malware families, exploit tools or initial access vectors are detailed in the source material.

Publicly available information does not establish any state sponsorship or criminal consortium affiliation for Cypress Insurance; the entity is presented as a private commercial insurer. The most notable publicly reported operation associated with the actor is the alleged large‑scale intrusion into over 32,000 workers compensation files that led to the Adela Gonzalez lawsuit, which references a prior similar case, Hector Casillas v. Berkshire Hathaway Homestate Companies et al., still pending at the time of the article. These cases represent the primary documented incidents linking Cypress Insurance to the alleged hacking activity.

Incidents

Attributed incidents are available to members.