Score Services LLC  d/b/a Score Capital Data Breach Notice (Vermont Attorney General)

The data breach affecting just three Vermont residents, disclosed by Score Services LLC on September 11, 2026, includes Social Security numbers and financial account information. If you received a letter from the company, your records were among those exposed.

Your Social Security Number Cannot Be Replaced

A Social Security number is permanent. Unlike a credit card or password, it cannot be cancelled and reissued on request. Once it is in the hands of identity thieves, it remains a usable tool for fraud, tax refund theft, and new account fraud for years. The filing lists Social Security numbers alongside financial account codes and credit and debit account information as exposed in this incident. No passwords were exposed.

What This Exposure Enables

With a Social Security number and financial account details, criminals can attempt to open new accounts, file fraudulent tax returns, or impersonate you to creditors. Credit and debit account information can be used for direct unauthorized charges or to build synthetic identities. Because only three people were affected according to the Vermont filing, this appears to be a narrowly targeted or highly limited exposure rather than a mass breach. That small number does not reduce the risk to those three individuals.

The Letter Is Your Confirmation

Score Services LLC is required to notify affected individuals directly, usually by mail. If you have not received a letter, it is likely your information was not included. However, if you have moved since the time of the incident, letters sent to your previous address may not have reached you. In that case, contact the company directly to confirm whether your records were involved. The filing does not state when the incident occurred, so the letter remains the only practical way to determine your status.

Why Financial Account Codes Matter Long-Term

Financial account codes and credit or debit account information can be sold on underground markets even after the initial breach window. While banks can replace compromised cards, the combination of those details with a Social Security number creates a more durable identity theft package. The absence of any biometric or government identifiers beyond the SSN in the listed categories limits some risks, but does not eliminate them.

What Remains Under Your Control

You cannot change your Social Security number, but you can control how closely it is monitored. Placing a freeze on your credit files prevents new accounts from being opened in your name without your explicit permission. Monitoring your accounts and tax filings for unexpected activity becomes more important now. Early detection remains the most effective defense against the types of fraud this exposure enables.

The small scale of this breach — only three Vermont residents named in the filing — means it will not dominate headlines. For the people who were affected, however, the consequences are personal and lasting. A single Social Security number paired with financial account data does not lose its value over time the way some stolen credentials do.

Protecting Yourself After This Specific Exposure

Because this incident centers on Social Security numbers and financial account information rather than login credentials, your priority is fraud monitoring and credit control rather than password changes. The company has a legal obligation to provide guidance to the affected individuals, but you do not need to wait for additional instructions before taking protective steps.

Anyone named in this filing should treat their Social Security number as compromised for practical purposes. That does not mean panic, but it does mean consistent vigilance. Credit freezes, regular account reviews, and watching for tax-related fraud are the most direct responses available.