Visit Charlottesville data breach (2026)

⛰️New Hampshire State AGlinked via multistate filing link · 100%

Filed Mar 18, 2026bd_2094a60fb31ec6d4

Charlottesville Settlement Company (CSC) notified the New Hampshire Attorney General of a data security incident affecting 22 NH residents. An unknown actor gained unauthorized access to CSC's network on September 2, 2025. CSC discovered unusual activity on September 4, 2025, and confirmed on March 10, 2026, that personal information (names, SSNs, driver's license numbers) may have been accessed. CSC engaged forensic experts, hardened its environment, and provided 12 months of credit monitoring and identity protection services to affected individuals.

🍁Vermont State AGlinked via multistate filing link · 100%

Filed Mar 18, 2026bd_cbcb08c4beceeda9

Charlottesville Settlement Company (CSC) notified consumers of a data security incident where an unknown actor gained unauthorized access to its network on September 2, 2025. CSC discovered unusual activity on September 4, 2025. The incident may have exposed names and other personal information. CSC engaged external cybersecurity experts, secured its email environment, and is offering 12 or 24 months of complimentary credit monitoring and identity theft protection through IDX.

VT AG >45 bday

🏎️Indiana State AG

Filed Mar 18, 2026bd_f42fbb8dbbc0de96

Charlottesville Settlement Company reported a data breach to the Indiana Attorney General. The breach occurred on 2025-09-02 and was reported on 2026-03-18. 30 Indiana residents were affected. 22,041 individuals affected in total.

Affected (this filing): 22,041

Visit Charlottesville

Litigation Timing

Timeline