Think that you have already identified the common vector as Home Depot. Also think that someone was lurking around the POS terminals and skimming data using some kind of scanner or reader. Even if you are using only one specific card, any of the others present in your wallet or card carrier can be phished if the scanner can "see" them and pull the information recorded on them. Recall a case where a scanner actually got stuffed into a gas pump at a pump and go where users fed their credit cards to the machine instead of having to enter the shop. Every time someone got gas, the contents of the card they used got copied to a memory chip and periodically someone would stroll by and download everything on the chip. The shop owner got suspicious due to all the "service traffic" that his pumps were getting and had an inspector come in. Busted>
As for the why of all this. Your theory about fake accidents, claims, and non-responding claimants sounds good. The other thought I had was that this is some way to establish a "legitimate" bogus id by creating a back story. If I am trying to prove in some way that I am who I am, having an insurance policy of long standing with a known Insurance provider could be one way to bolster or support my purported legitimacy. Also, Insurance companies have clients fill in all kinds of forms in order to be approved for a policy. Access to that data can give someone who otherwise can't get insurance, too many DUI's for example, a way to beat the system, or it could be a method of access that could allow an invader to subsequently jump from one date base to another. Example being using the insurance data base to try to cross over to the DMV one. They have to talk to each other because DMV needs/wants to be able to prove to itself that you are insured. The slips or cards are just too easy to forge or fake. By all means change all your passwords, particularly those you may have on your cell. They are particularly open to theft because Wi-Fi is not secure.
Nick
As for the why of all this. Your theory about fake accidents, claims, and non-responding claimants sounds good. The other thought I had was that this is some way to establish a "legitimate" bogus id by creating a back story. If I am trying to prove in some way that I am who I am, having an insurance policy of long standing with a known Insurance provider could be one way to bolster or support my purported legitimacy. Also, Insurance companies have clients fill in all kinds of forms in order to be approved for a policy. Access to that data can give someone who otherwise can't get insurance, too many DUI's for example, a way to beat the system, or it could be a method of access that could allow an invader to subsequently jump from one date base to another. Example being using the insurance data base to try to cross over to the DMV one. They have to talk to each other because DMV needs/wants to be able to prove to itself that you are insured. The slips or cards are just too easy to forge or fake. By all means change all your passwords, particularly those you may have on your cell. They are particularly open to theft because Wi-Fi is not secure.
Nick