Churchill Claims Services, Inc. confirmed a data breach investigation in April 2026. The breach, attributed to the Securotrop ransomware group, occurred on September 14, 2025, with discovery on March 31, 2026. Written notifications to consumers began on April 27, 2026.
The breach involved approximately 2,610 individuals. Exposed data includes names, Social Security Numbers, dates of birth, addresses, government ID numbers, financial account information, medical information, employee phone numbers, employee compensation records, scanned documents, insured vehicle lists with client names and contact details, appraisal logs, and profit margin analyses. While specific counts for Maine, Massachusetts, Indiana, Vermont, and New Hampshire are known, other affected states are not yet fully disclosed.
More details may emerge as the investigation continues and state attorney general filings become public. It is important to remember that delays can occur in the notification process.