Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

A cybercrime group has claimed it stole data from Tower Insurance, but the available reporting does not confirm that an intrusion occurred or that customer information was taken. Tower described information posted on cyber forums as “unverified” and was reported to be investigating with external cybersecurity consultants.

What has been reported about Tower Insurance?

Insurance Business reported that a ransomware group named Tower Insurance on a cyber-extortion leak site and claimed to have stolen data. The outlet said Tower was aware of “unverified information” posted on cyber forums, was working with external cybersecurity consultants and had notified relevant authorities. Insurance Business’ report attributed this statement to a Tower spokesperson speaking to Stuff: “undertaken a methodical process, working with our external cybersecurity consultants and notifying relevant authorities,”

Insurance Business also reported that Tower had not announced the matter to the NZX or ASX at the time of its article. That is a time-specific report, not confirmation of the company’s current disclosure status. The outlet said Tower would notify affected customers and stakeholders immediately if any were identified.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does the leak-site listing confirm a breach?

No. A threat actor’s claim that it stole information is an allegation, not proof that its systems accessed Tower data or that customer records were taken. Tower’s reported description of the information as unverified likewise does not confirm a breach.

#1 Best Overall
SecuX PUFido USB-C Security Key with PUF Technology, FIDO2/U2F Certified, Hardware-Rooted Unclonable Security for Passwordless Login and 2FA Authentication
  • A FIDO security key with PUF technology provides a unique, hardware-rooted trust anchor that resists tampering and cyber attacks, offering stronger security than conventional designs.
  • FIDO2 Certified Protection – Enjoy phishing-resistant security with FIDO2 certification, ensuring top-tier account safety across Windows, macOS, Linux, iOS iOS, Android and more.
  • Easy to use & Portable – Designed with a compact USB-C interface, Clife key fits easily on your keychain for secure access anywhere. Simply plug in and authenticate with ease.
  • Universal Compatibility – Works seamlessly with hundreds of FIDO2/U2F compliant services, including popular cloud, email, and social platforms.
  • Backup recommended – To ensure continuous access, register a backup Clife security key as a spare in case your primary key is lost.

A separate breach-monitoring report from GalaxyWarden attributes a Tower leak-site listing to Coinbase Cartel and dates it August 22, 2026. The report says the listing and alleged theft are unverified; it does not give a number of affected people or identify specific data categories. GalaxyWarden’s listing report is secondary threat-intelligence reporting, not an independent forensic finding.

Was my information exposed?

The available reports do not establish that any individual customer was affected, what data might have been accessed, or how many records—if any—were exposed. They do not support treating Tower’s overall customer base as a count of people involved. Until Tower or an authoritative source confirms details, it is not possible to determine from these reports whether a particular customer’s information was exposed.

Rank #2
SecuX PUFido® Drive Clife Key USB C Security Key with PUF Technology and Built in Flash Drive, FIDO2 U2F Certified Hardware Rooted Unclonable Security for Passwordless Login and 2FA Authentication (1)
  • Hardware-Rooted Security with PUF Technology – PUFido Drive Clife Key uses Physical Unclonable Function technology to generate a unique, hardware-based identity that cannot be duplicated, delivering stronger resistance against tampering and cyber attacks than conventional security keys.
  • FIDO2 Certified Phishing-Resistant Protection – Fully compliant with FIDO2/U2F standards, enabling secure passwordless login and two-factor authentication to help protect accounts from phishing and credential theft.
  • Security Key + Flash Drive in One Device – Combines a FIDO security key with a built-in USB flash drive, allowing you to carry files and a hardware authentication key together in a single compact device.
  • Easy to Use & Portable – Compact USB-C design fits easily on a keychain or in a pocket. Simply plug in the Drive Clife Key to authenticate or access stored files with no extra software required.
  • Universal Compatibility – Works with hundreds of FIDO2/U2F compatible services and supports Windows, macOS, Linux, iOS, Android, and other major platforms.

How can Tower customers get information?

For incident-specific questions, use Tower’s official customer channels rather than relying on leak-site claims or speculation. Its contact page lists the My Tower portal, a contact form and customer service. Tower directs claims enquiries to the customer’s claims manager.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Check Tower’s official communications for an incident update.
  • Check NZX or ASX announcements for any subsequent market disclosure.
  • If you are a broker, share only information Tower has confirmed and consider whether information held in your own systems could be involved.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What remains unknown

The cited reports do not establish whether Tower later confirmed an intrusion, whether any data was accessed, which information might be involved, or whether customers were affected. The Insurance Business article’s statement about the absence of an NZX or ASX announcement applies only at its publication time; check current official company and regulator communications for later developments.

Rank #4
Thetis Pro FIDO2 Security Key Passkey with Complex Pin [PinPlex], Hardware Device Supports USB A, Type C &NFC, TOTP/HOTP Authenticator APP, PIV Certificates, FIDO 2.0 Two Factor Authentication 2FA MFA
  • Dual USB-A and USB-C Security Key – Features both USB-A and USB-C connectors for seamless compatibility across desktops, laptops, and tablets. Supports plug-and-stay use or keychain carry.
  • NFC-Enabled for Mobile Access – Built-in NFC allows fast, wireless authentication with Android and iPhone devices. Ideal for mobile logins and on-the-go security.
  • FIDO Certified for Strong Authentication – [CHECK COMPATIBILITY before purchase] Fully compliant with FIDO2 and FIDO U2F standards. Works with major platforms like Google, Microsoft, GitHub, and Dropbox.
  • Passwordless Login with PinPlex – Supports secure passkey login via WebAuthn and CTAP2 with added protection from PinPlex, a complex PIN system that enhances physical security.
  • Multi-Layer Authentication Support – Includes PIV certificates and supports both TOTP and HOTP for strong 2FA/MFA coverage across enterprise and consumer apps.
Rank #3
Sale
Thetis Nano-A FIDO2 Security Key Hardware Passkey Device with USB Type A, TOTP/HOTP, FIDO2.0 Two Factor Authentication 2FA MFA, Works with Windows/mac/iOS/Android/Linux/Gmail/Facebook/GitHub/Coinbase
  • Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
  • USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
  • FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
  • Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
  • Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.