PDCM Insurance Data Breach Notice (Vermont Attorney General)

A Social Security number belonging to one Vermont resident has been exposed in a data breach at PDCM Insurance. The filing, submitted to the Vermont Attorney General on September 29, 2026, lists Social Security numbers as the information involved.

Because a Social Security number cannot be changed or reissued on request, this exposure is permanent. Unlike a credit card or password, it does not expire and retains its value to identity thieves for years. If you were notified by PDCM Insurance, this record is now outside the company’s control and could be used to open accounts, file fraudulent tax returns, or commit other forms of identity fraud in your name.

Social Security Numbers Create Long-Term Risk

The record establishes that Social Security numbers were exposed. No passwords were exposed. This means the immediate risk is not to your PDCM Insurance account itself but to your broader identity. Criminals can combine a Social Security number with publicly available information to impersonate you with banks, employers, or government agencies.

PDCM Insurance is required to notify affected individuals directly, usually by mail. If you received a letter from the company, you are in the group of one person named in this filing. Absence of a letter usually means your information was not included, though anyone who has moved since the incident should contact PDCM Insurance directly to confirm their status.

What Cannot Be Fixed

A Social Security number does not expire and cannot be reissued on request. This is why it is treated differently from a password: there is no version of this you can simply change. The exposure therefore creates a lifelong need for vigilance rather than a one-time fix.

Monitoring Remains Your Most Practical Control

With only a Social Security number exposed, the most useful ongoing protection is active monitoring for new accounts or tax filings opened in your name. Early detection limits the damage. Credit freezes remain effective because they block new creditors from pulling your file without your explicit permission.

The filing does not disclose the root cause, whether the data was encrypted, or how it was accessed. Those details remain unknown.

Recommended Actions

• Place a credit freeze with Equifax, Experian, and TransUnion to prevent new accounts from being opened in your name.
• Review your annual tax transcript at IRS.gov to ensure no fraudulent returns have been filed using your Social Security number.
• Sign up for free credit monitoring offered by PDCM Insurance if a letter provides instructions, as many breach notifications include a limited period of coverage.
• File your taxes early each year so legitimate returns are recorded first, reducing the window for fraudsters to file in your name.
• Contact PDCM Insurance directly if you have moved or never received notification, to verify whether your record was among those affected.