DataBreachLegalRights.com

The Churchill Claims Services, Inc. data breach: your legal rights

Churchill Claims Services, Inc. told the Vermont Attorney General that people’s personal information was exposed. If you got a notice, these are the rights you have.

Get a free case review

Your rights after this breach

  • To be told about the breach

    Vermont law requires a company that loses residents' personal information to notify them. Churchill Claims Services, Inc. reported this breach to the Vermont Attorney General.

    Vermont data breach notification law

  • To file a health privacy complaint

    Medical or insurance information is listed. You can file a complaint with the U.S. Department of Health and Human Services. That law does not let you sue directly, but state-law claims may still be possible.

    HIPAA (complaints to HHS Office for Civil Rights)

  • Limits on what you owe for fraud

    Account or card information is listed. Report unauthorized charges quickly; federal law caps how much you can be held responsible for, and the sooner you report, the lower the cap.

    Electronic Fund Transfer Act and Fair Credit Billing Act

  • To ask whether you can recover money

    If Churchill Claims Services, Inc. did not take reasonable care of your information, you may have a claim for negligence or under Vermont law. An attorney can review it with you for free.

    Vermont common law and consumer protection statutes

Rights every American has after a breach

Free case review

Tell us you got the Churchill Claims Services, Inc. notice. An attorney reviews it and tells you plainly whether you may have a claim.

  • Free, no obligation
  • No fee unless you recover
  • Reply within 24 hours

Got a Notification Letter? Find Out If You Qualify

Free review. No cost, no obligation.

Upload your breach letter (optional)

No attorney-client relationship is created by submitting this form. Attorney Advertising.

What Churchill Claims Services, Inc. reported

Reported to
Vermont Attorney General
Date filed
April 28, 2026
People notified
Not stated
Cause in filing
Not stated

Information listed in the filing: Full Name, Social Security Number, Date of Birth, Insurance Policy Number, Claim Details and Incident Reports, Financial Account and Routing Numbers, Medical and Treatment Information, Wage and Employment Records.

Churchill Claims Services, Inc. operates within the property and casualty insurance and claims management sector, serving as a third-party administrator and adjustment provider for insurance carriers, self-insured corporations, and municipal entities. Because of its core operational functions, Churchill Claims routinely collects, processes, and stores an extensive volume of highly sensitive personal and financial data. The company handles comprehensive claims files that encompass detailed incident reports, medical evaluations, wage verification records, banking details for settlement payouts, and government-issued identification numbers. This vast repository of confidential information is essential for evaluating liability, processing insurance claims, and issuing disbursements, making the organization a central repository for deeply private consumer and claimant records.

In 2026, Churchill Claims Services, Inc. reported a significant cybersecurity incident to the Vermont Attorney General, alerting regulators and affected individuals that its network security had been compromised. Incidents impacting insurance claims administrators typically involve sophisticated network intrusions, unauthorized access to legacy databases, or ransomware deployments that target centralized claims management systems. Because third-party administrators manage complex data ecosystems shared with numerous carrier partners and independent adjusters, vulnerabilities in network perimeters or vendor access points frequently serve as entry vectors for malicious actors seeking to harvest high-value personal information.

The data compromised in this breach extends far beyond basic contact information, exposing core identifiers that create severe, long-term risks for victims. Exposed records commonly include full names, dates of birth, Social Security numbers, insurance policy numbers, claim details, banking and routing information used for settlement distribution, and sensitive medical or employment documentation submitted to substantiate losses. The exposure of Social Security numbers and financial account details leaves victims highly vulnerable to identity theft, financial account takeover, and fraudulent tax filings. Furthermore, the inclusion of intimate claim histories, medical diagnoses, and accident narratives exposes individuals to targeted scams, medical fraud, and severe compromises of personal privacy.

As an entity handling sensitive insurance and financial records, Churchill Claims Services, Inc. was bound by rigorous legal obligations under state data protection statutes, common law duty, and industry regulations to maintain robust administrative, technical, and physical safeguards. These standards mandate continuous network monitoring, strict access controls, encryption of data at rest and in transit, and thorough vulnerability assessments. The occurrence of a data breach of this magnitude serves as a strong indication that the company may have failed to implement these required security measures, leaving confidential consumer data inadequately protected against foreseeable cyber threats.

Receiving a data breach notification letter from Churchill Claims Services, Inc. is a formal acknowledgment that your private information was compromised due to corporate security failures. Under modern consumer protection and class action jurisprudence, the receipt of such a notice establishes legal standing to pursue claims for negligence, breach of implied contract, and invasion of privacy, even before out-of-pocket financial loss manifests. Our law firm is currently investigating potential class action lawsuits on behalf of affected individuals. We handle all data breach cases on a strict contingency fee basis, meaning you pay no out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.

See the official filing

Churchill Claims Services, Inc. data breach questions

How many people were affected by the Churchill Claims Services, Inc. data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Social Security Number, Date of Birth, Insurance Policy Number, Claim Details and Incident Reports, Financial Account and Routing Numbers, Medical and Treatment Information, Wage and Employment Records. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Is the Churchill Claims Services, Inc. data breach letter legit or a scam?
A notice from Churchill Claims Services, Inc. in the mail matches the breach Churchill Claims Services, Inc. reported to the Vermont Attorney General on April 28, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Churchill Claims Services, Inc. through a phone number or website you find yourself.
Did Churchill Claims Services, Inc. offer free credit monitoring?
Any free monitoring Churchill Claims Services, Inc. is offering will be described in the notice you received, along with an activation code and a sign-up deadline. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Enrolling does not give up your right to bring a claim.
Is there a Churchill Claims Services, Inc. data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Churchill Claims Services, Inc.. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
What should I do after getting the Churchill Claims Services, Inc. data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Where can I see the official Churchill Claims Services, Inc. breach notice?
Churchill Claims Services, Inc.'s report is published by the Vermont Attorney General: https://ago.vermont.gov/categories/security-breach-notices#churchill-claims-services-inc--2026-04-28 Compare it with the letter you received to confirm the dates and details match.
Do I need a Churchill Claims Services, Inc. data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Can I sue Churchill Claims Services, Inc. over the data breach?
It depends on what was exposed, the law in Vermont and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
How much could a Churchill Claims Services, Inc. data breach settlement or claim be worth?
There is no set amount, and no Churchill Claims Services, Inc. settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Social Security Number, Date of Birth as involved. Keep receipts and records; they're what damages claims are built on.

Other breaches reported in Vermont

Attorney advertising. General information, not legal advice for your situation. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.