HackingProfessional ServicesCustomer Data InvolvedPIIMediumContained

Churchill Claims Services, Inc.

bd_176eeac8076c3118 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 31, 2026

Filed

Apr 27, 2026

To disclose

27 days

Affected · nationwide

2,61058 in this filing

Linked

7 records

Confidence

84%

Full breach record for Churchill Claims Services, Inc. →

Churchill Claims Services, Inc. (Clearwater, FL) experienced an external system breach (hacking) on September 14, 2025, discovered on March 31, 2026. The breach affected 2,610 individuals total, including 58 Maine residents. Written notifications were sent on April 27, 2026, and identity theft protection services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Mar 31, 2026 → Filed with AG Apr 27, 202627d ✓ ME AG ≤30d27 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 198 days

discovery → filing · 27 days

Sep 14, 2025

Begins

Mar 31, 2026

Discovered

Apr 27, 2026

Filed

This filing is one of 7 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesecurotropbd_f8817f2de5186b0e2025-10-09 · +200dVerified

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_533d0ae003a5405d2026-04-27Verified
Nebraska State AGbd_8764e5ad5d719a862026-04-27Verified by operator
Indiana State AGbd_a2237f9466e1fa702026-04-27Verified
Massachusetts State AGbd_28b153d3712f67fc2026-04-28 · +1dVerified by operator

Show 1 more filing ↓up to 1d gap

Vermont State AGbd_2b2dc5068bbe5e922026-04-28 · +1dVerified

Name: Churchill Claims Services, Inc.
norm: churchill claims
Domain: churchill-claims.com
Industry: Other Commercial

Name: Churchill Claims Services, Inc.
norm: churchill claims
Domain: churchill-claims.com
Industry: Other Commercial

Discovered: Mar 31, 2026
Breach occurred: Sep 14, 2025
Undetected for: 198 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 27, 2026
Affected individuals: 2,610state + nationwide
Data types: PII
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notification filed with Maine Attorney General

During the incident: Written notification sent to affected individuals
Identity theft protection services offered
Changes made: Identity theft protection services offered to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: ME AG ≤30d · 27d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Mar 31, 2026
→ Filed with AG: Apr 27, 2026
27d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Mar 31, 2026 → Filed with AG: Apr 27, 2026	27d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

New Hampshire State AGApr 27 · first

Nebraska State AGApr 27 · first

Indiana State AGApr 27 · first

Maine State AGApr 27 · first · this page

Massachusetts State AG+1d

Vermont State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8f7acd33-6e8c-4a86-8d1b-2a5f1167c659.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 27, 2026
Raw hash: 2d620673980258e7a31636e947e657d4c786d55cdd460aefe485ba20dc1b200a

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityChurchill Claims Services, Inc.

Victim entityChurchill Claims Services, Inc.

Incidentdiscovered Mar 31, 2026

Stated responseWritten notification sent to affected individuals

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov