ISCO International, based in Schaumburg, Illinois, notified individuals and state regulators of a data security incident in November 2026. The company sent notification letters to affected individuals dated November 2, 2026, and submitted regulatory reports to state authorities, including the Vermont Attorney General and Massachusetts Attorney General, on November 3, 2026.
According to regulatory filings, the compromised information included Social Security numbers and driver's license numbers. The total number of affected individuals nationwide has not been disclosed, though state filings confirmed at least two residents in Massachusetts alongside an unspecified number in Vermont. The incident date, date of discovery, and specific attack vector have not been publicly detailed.
As investigations continue, additional details regarding the scope of the incident or additional affected individuals may emerge over time. Affected residents were offered 24 months of complimentary credit monitoring and identity protection services.