Surplus Line Association of California Data Breach Notice (Vermont Attorney General)

The Surplus Line Association of California has notified one Vermont resident that their Social Security number was exposed in a data breach. The filing, submitted to the Vermont Attorney General on July 14, 2026, lists Social Security numbers as the information involved.

Your Social Security Number Cannot Be Changed

A Social Security number is a permanent identifier. Unlike a credit card or password, it cannot be reissued on request or rotated when compromised. Once it is exposed, the risk remains for the rest of your life. This single piece of information, when combined with a name or date of birth, allows thieves to open accounts, file fraudulent tax returns, claim government benefits, or impersonate you in medical and financial settings.

Because the record names only Social Security numbers, no passwords were exposed. That means the account itself was not directly compromised in a way that would let someone log in as you. This is genuinely good news. You do not need to change any passwords because of this incident.

What the Exposure Enables

An exposed Social Security number is valuable to identity thieves because it never expires. Criminals can use it immediately or hold it for years until other pieces of information become available. With your SSN, attackers can: