Charlottesville Settlement Company
bd_2094a60fb31ec6d4 · schema v1 · pii pii-v1
Full breach record for Charlottesville Settlement Company →Charlottesville Settlement Company (CSC) notified the New Hampshire Attorney General of a data security incident affecting 22 NH residents. An unknown actor gained unauthorized access to CSC's network on September 2, 2025. CSC discovered unusual activity on September 4, 2025, and confirmed on March 10, 2026, that personal information (names, SSNs, driver's license numbers) may have been accessed. CSC engaged forensic experts, hardened its environment, and provided 12 months of credit monitoring and identity protection services to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 2, 2025
Begins
Sep 4, 2025
Discovered
Mar 18, 2026
Filed
vs. sector median
+10 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_2e647ce081b521a02026-03-18Candidate
- Massachusetts State AGbd_7f2d7a84820614342026-03-18Verified
- Vermont State AGbd_cbcb08c4beceeda92026-03-18Verified
- Indiana State AGbd_f42fbb8dbbc0de962026-03-18Verified
Show 1 more filing ↓Show fewer ↑
- Nebraska State AGbd_fad896f4132b92ef2026-03-18Verified
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.