Score Services LLC, doing business as Score Capital, notified the Vermont Attorney General in September 2026 of a data breach exposing Social Security numbers, financial account codes, and credit and debit account information. The number of people affected has not been disclosed. Anyone who received a notice should place a credit freeze or fraud alert immediately and monitor financial accounts closely for signs of fraud.
| Company | Score Services LLC d/b/a Score Capital |
|---|---|
| Industry | Finance |
| Data Types Exposed | Social Security Numbers, Financial Account Codes, Credit and Debit Account Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Score Capital Data Breach?
Score Services LLC, which does business as Score Capital, has confirmed a data breach involving sensitive personal and financial information. The company filed a formal notification with the Vermont Attorney General in September 2026. This filing disclosed that unauthorized parties may have accessed consumer data held by the firm.
The exact date the breach was discovered has not been publicly disclosed. However, the notification confirms that the company identified unauthorized access to information in its systems. As a result, Score Capital moved to notify affected individuals and regulators as required by law.
Details about the specific method used by the attacker have not been made public. In addition, the company has not released a full timeline describing how long the intrusion lasted before it was caught. Because these details remain limited, affected individuals should rely on official notices from Score Capital for updates.
Following the discovery, Score Capital reportedly began an internal investigation to determine the scope of the incident. This process typically involves forensic specialists who review network logs and access records. The goal of this investigation is to confirm exactly which files or systems were touched during the breach.
Who Was Affected?
The breach potentially affects consumers who did business with Score Capital or whose information was otherwise stored in the company’s systems. Because Score Capital operates in the financial services space, affected individuals may include current or former customers, loan applicants, or other consumers whose data was processed by the firm.
The exact number of individuals affected has not been publicly disclosed. Therefore, the scope of the breach in terms of total impacted people remains unclear at this time. However, the fact that the company filed a formal notice with a state attorney general indicates that at least one Vermont resident was affected.
It is not yet known whether the breach extends beyond Vermont to residents of other states. Given that financial services firms often maintain nationwide client bases, the true reach of this incident could be broader than what has been reported so far. Individuals who have interacted with Score Capital in any capacity should stay alert for a notification letter.
What Information Was Potentially Exposed?
According to the breach notification, several categories of highly sensitive data were involved in this incident. This type of information is especially valuable to criminals because it can be used to commit identity theft or financial fraud. Below is a summary of the data categories confirmed in the filing.
- Social Security Numbers
- Financial Account Codes
- Credit and Debit Account Information
The exposure of Social Security numbers is particularly concerning. This is because SSNs serve as a permanent identifier that criminals can use to open new credit accounts, file fraudulent tax returns, or apply for loans in someone else’s name. Unlike a password, a Social Security number cannot simply be changed after a breach.
In addition, the exposure of financial account codes and credit or debit card details raises the risk of direct financial fraud. As a result, affected individuals could see unauthorized charges or attempts to drain existing accounts. Criminals often move quickly to exploit stolen payment information before victims notice suspicious activity.
What Is the Company Doing?
In response to the breach, Score Capital filed official notification paperwork with state regulators. Specifically, the company filed with the Vermont Attorney General in September 2026. This filing is a required legal step whenever a company discovers that residents’ personal information may have been compromised.
Beyond the regulatory filing, the company is expected to notify individually affected consumers directly, as is standard practice following this type of incident. Companies in this situation typically also work to shore up their network defenses. This can include resetting credentials, patching vulnerabilities, and adding new monitoring tools to detect future intrusions.
It is not yet clear whether Score Capital is offering free credit monitoring or identity protection services to those affected. Consumers should watch for an official letter that outlines any protective services being offered. Meanwhile, affected individuals should not wait for that letter before taking their own precautions.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Anyone affected by this breach should begin checking their credit reports regularly. This is because new accounts opened fraudulently in your name will often show up first on a credit report. You can request a free copy of your report from each of the three major credit bureaus.
In addition to periodic checks, consider spacing out your requests from each bureau throughout the year. This way, you get a fresh look at your credit file every few months instead of all at once. If you spot an unfamiliar account or inquiry, dispute it immediately with the bureau involved.
Consider a Fraud Alert or Credit Freeze
Because Social Security numbers and financial account details were involved, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires lenders to verify your identity before opening new credit in your name. A credit freeze goes further by blocking most access to your credit file entirely.
To set up a freeze, you must contact each of the three major credit bureaus separately. While this takes a bit of effort, it is one of the most effective ways to stop identity thieves from opening new accounts. You can lift the freeze temporarily whenever you need to apply for credit yourself.
Watch for Phishing Attempts
After a breach like this, scammers often try to exploit the situation with phishing emails or texts. These messages may pretend to be from Score Capital or a credit bureau, asking you to click a link or confirm personal details. Always verify the sender before responding to any unexpected message.
For example, if you receive an email claiming to be a security update, go directly to the official company website instead of clicking any embedded links. This simple habit can prevent you from accidentally handing over more information to a scammer. When in doubt, delete the message and contact the company directly using a verified phone number.
Review Financial Accounts Closely
Given that credit and debit account information was exposed, review your bank and card statements closely over the coming months. Look for even small, unfamiliar charges, since fraudsters sometimes test stolen card numbers with tiny purchases first. Report anything suspicious to your bank right away.
Many banks offer transaction alerts that notify you by text or email whenever a charge is made. Turning these on can help you catch fraudulent activity within minutes rather than weeks. If your card was compromised, ask your bank about canceling and reissuing it as a precaution.
Consider Consulting a Data Breach Attorney
If you received a notification letter from Score Capital, you may have legal options worth exploring. Many affected individuals choose to speak with a data breach attorney for a free case evaluation. This can help clarify whether you qualify for compensation through a class action or other legal action.
Because laws around data breach liability vary by state, an attorney can explain your specific rights based on where you live. In the meantime, keep any notification letters, account statements, or evidence of fraud in a safe place. This documentation can support a claim if you decide to pursue one later.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General