We did get a letter about the security breach, and the offer for 2 free years identity theft protection, so...thanks, I guess? Nothing horrible has happened yet, but as far as I can tell, we don't really have any recourse other than sitting and waiting for bad things to occur. No actionable information provided.
The notice they sent us went out months after they found out about it. Which I'm kind of grumpy about, but at least to some degree makes sense. They don't want to go public with the information until they've locked down as much as they can.
One last gripe: the letter was mostly worded in the "protect our own butts legally and limit our liability as much as possible" sense, not the "we're sorry this happened to your personal information and we want to make it right" sense. Which, I mean, come on. This is an insurance company. That's literally what they do for a living.