HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Summit Insurance Services, Inc.
bd_5e0b67b2e99a3b99 · schema v1 · pii pii-v1
Full breach record for Summit Insurance Services, Inc. →Summit Insurance Services, Inc. disclosed a data incident occurring between September 18, 2024, and December 2, 2024. The breach likely involved unauthorized access using valid credentials, exposing personal information including names, addresses, and potentially government IDs. The company engaged forensic investigators, notified law enforcement, and offered credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5c3f09b17bb4dd59Maine State AGfiled 2026-03-26Verified
- bd_0de36613c917f4fbIndiana State AGfiled 2026-03-23(3d gap)Candidate
- bd_dac52925c326ae4fIndiana State AGfiled 2026-03-23(3d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-26-summit-insurance-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 26, 2026
- Raw hash
- 81ba40d5bccda0fbe6d236005402a93bc9cb7fe35d1ddd3fafd933685d7c2048
Reporting entity
- Name
- Summit Insurance Services, Inc.norm: summit insurance
Victim entity
- Name
- Summit Insurance Services, Inc.norm: summit insurance
Incident
- Discovered
- Dec 2, 2024
- Materiality determined
- —
- Notification sent
- Mar 26, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(479 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.