Cyber Threat Actor: Cypress Insurance

Cypress Insurance, also known by its alias Cypress Insurance, is a workers compensation insurance company headquartered in San Francisco, California. The entity has been identified in a federal lawsuit as one of several insurers accused of orchestrating illegal access to confidential workers compensation files in order to obtain personal data about injured workers and their attorneys. The lawsuit alleges that the company, together with other insurers and hired private investigators, engaged in a coordinated effort to breach attorney‑client privileged information stored on law firm servers.

The alleged targeting focused on the workers compensation sector, specifically claimants, their legal representatives, and the law firms handling those cases in California and potentially broader United States jurisdictions. According to the complaint, the strategic objective behind the intrusions was financial: the insurers sought to gain a litigation advantage and reduce costs associated with judgments and settlements by accessing sensitive information such as Social Security numbers, birth dates, home addresses, and medical details. The hacking activity is described as having occurred over several years and being directed by the insurers themselves to facilitate these financial aims.

Reported tactics involved unauthorized access to servers containing workers compensation files and the subsequent downloading of those files, with one investigator admitting to retrieving over 33,000 records. No specific malware families, exploit tools, or initial access vectors are detailed in the source material beyond the general characterization of hacking and file downloads. Attribution points solely to private corporate actors and their contracted investigators, with no publicly asserted ties to state sponsors or criminal consortia. The operation described in the lawsuit represents a notable campaign due to its scale—affecting over 32,000 workers compensation files—and its role in prompting ongoing civil litigation.