Score Capital, doing business as Score Services LLC, has reported a data security incident to the Vermont Attorney General’s Office. According to the filing, the breach exposed sensitive personal and financial information belonging to at least a handful of Vermont residents, and the company may still be determining the full scope of individuals affected nationwide.
Score Capital’s Data Breach Investigation
Score Capital operates as a direct lender in the financial services industry, providing capital and lending products to consumers and small businesses. On September 11, 2026, the company disclosed a data security incident to Vermont’s Attorney General as required under the state’s data breach notification law. The filing indicates that at least three Vermont residents had their personal and financial information exposed, though the company has not yet publicly disclosed how the incident occurred, when it began, or when it was discovered.
State breach notification laws like Vermont’s require companies to report incidents affecting even a small number of residents, which means the total number of people affected nationwide could be considerably higher than the Vermont-specific figure once other states’ filings and the company’s own consumer notifications are accounted for. Financial services companies are a frequent target for cybercriminals because the data they store, including Social Security numbers and account information, can be used directly for identity theft and financial fraud.
Companies that extend credit or process loan applications typically collect and retain highly sensitive information for extended periods, including Social Security numbers, bank account and routing numbers, and other financial account identifiers. When that data is exposed, affected individuals can face a heightened risk of account takeover, unauthorized transactions, and long-term identity theft that may not surface immediately. The combination of Social Security numbers with financial account details is considered one of the more dangerous data type pairings in a breach, since it gives bad actors what they need to both open new lines of credit in a victim’s name and attempt to access existing accounts.
Consumers whose information may have been compromised in an incident like this are typically encouraged to act quickly, since the window between a breach and its public disclosure can leave stolen data circulating for weeks or months before individuals are notified. Companies are generally required to provide notice within a reasonable time after discovering an incident, but the exact timeline for when Score Capital identified this breach and when it plans to notify affected individuals directly has not been made public.
When Did This Breach Occur?
Score Capital’s data security incident was reported to the Vermont Attorney General’s Office on September 11, 2026. The company has not publicly disclosed the specific dates on which the breach occurred, when it was discovered, or when affected individuals will receive or received formal notification.
What Information Was Breached?
According to the Vermont Attorney General filing, the categories of information involved in this breach include Social Security numbers, financial account codes, and credit or debit account information. The company has not disclosed additional details about the specific circumstances of the exposure.
What You Can Do
If you believe your information may have been affected by the Score Capital data breach, consider taking the following steps:
- Monitor your bank and credit card statements closely for any unauthorized or unfamiliar transactions.
- Request a free copy of your credit report from each of the three major credit bureaus and review it for accounts you did not open.
- Consider placing a fraud alert or credit freeze on your credit file to make it harder for identity thieves to open new accounts in your name.
- Be cautious of unexpected calls, emails, or texts claiming to be from Score Capital or your financial institution, especially any asking you to verify account details.
- Change passwords for any online accounts associated with the affected information, particularly financial and banking accounts.
File a Data Breach Lawsuit Against Score Capital
If your personal information was compromised as a result of the Score Capital data breach, you may have legal options available to you. Companies that collect sensitive financial information have a responsibility to implement reasonable safeguards to protect it, and when those safeguards fail, affected consumers can face lasting consequences.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
