PDCM Insurance data breach
PDCM Insurance, a Vermont-based agency, reported a significant data breach on September 29, 2026. This incident exposed sensitive client information including Full Name, Social Security Number, and Financial Account Number. Individuals who received a notification letter should understand their potential risks and available options.
Docket sheet
- Company
- PDCM Insurance
- Venue
- Vermont Attorney General
- Filed
- September 29, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Vermont Attorney GeneralSeptember 29, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Policy Number
- Financial Account Number
- Routing Number
- Home Address
- Driver's License Number
- Claim History
Clerk's notes
On September 29, 2026, PDCM Insurance, an insurance agency operating in Vermont, formally disclosed a cybersecurity incident to regulatory authorities. This filing indicates that the company experienced a breach involving its digital infrastructure, which stores confidential client records. The specifics of how the breach occurred are currently under investigation, with its status being monitored.
The reported data exposure from this incident includes a range of highly sensitive personal and financial identifiers. Among the categories confirmed to be compromised are Full Name, Social Security Number, Date of Birth, Policy Number, Financial Account Number, Routing Number, Home Address, Driver's License Number, and Claim History. This aggregation of data presents a substantial risk to affected individuals.
Such an exposure creates a permanent vulnerability for those impacted. Bad actors could potentially leverage this stolen information for various forms of identity theft, to open fraudulent credit lines, or to gain unauthorized access to existing financial accounts. Unlike a password, many of these personal identifiers cannot be changed, making long-term vigilance crucial for victims.
Under federal and Vermont state regulations, companies like PDCM Insurance are obligated to protect customer data through robust security measures. The occurrence of a breach typically suggests a potential failure in these foundational security duties, indicating that the organization may not have maintained reasonable safeguards commensurate with the sensitive data it collects.
If you have received a formal data breach notification letter from PDCM Insurance, it serves as an official acknowledgment that your private information was compromised. This notification establishes the basis for understanding your rights. Our firm is currently reviewing this incident, and individuals who received such a letter may be eligible for a free case review to assess their potential options. There is no cost unless we successfully recover compensation.
If a notification letter about this breach reached you, see every Vermont data breach on file or browse all cases.
Other Vermont docket entries
- Nephrology AssociatesVermont AGNovember 6, 2026Monitoring
- IronBridge Wealth Counsel, LLCVermont AGNovember 6, 2026Monitoring
- Insight Credit UnionVermont AGNovember 6, 2026Monitoring
- Family Implant and DentistryVermont AGNovember 6, 2026Monitoring
- Amplifon (USA), Inc.Vermont AGNovember 5, 2026Monitoring
- UFP technologies,Vermont AGNovember 5, 2026Monitoring
- Xplicit Audio LLCVermont AGNovember 5, 2026Monitoring
- Killingly Public Schools (KPS)Vermont AGNovember 5, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.