Smith-Midland Corp. Discloses Data Breach Affecting Sensitive Personal Information
Smith-Midland Corp. (SMC), a Virginia-based company, recently reported a data breach involving unauthorized access to files containing sensitive personal information. The incident came to light on January 15, 2025, when the company detected suspicious activity within its network. An investigation revealed that an unknown actor had accessed and acquired certain files, prompting a thorough review to assess the scope of the exposure.
The compromised data included names, dates of birth, Social Security numbers, driver’s license and state ID numbers, taxpayer identification numbers, financial account details, medical information, and health insurance data. SMC began notifying affected individuals on August 3, 2026, and disclosed the breach to the Massachusetts Office of Consumer Affairs and Business Regulation, along with a public notice on its website.
In response, SMC is offering 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks, including fraud monitoring, identity restoration support, and $1 million in identity theft insurance. Affected individuals can enroll using an activation code from their notification letter by October 31, 2026. For further assistance, SMC has set up a dedicated toll-free helpline and a mailing address for inquiries.
Source: https://www.claimdepot.com/data-breach/smith-midland-corporation-2026
Smith-Midland Corporation cybersecurity rating report: https://www.rankiteo.com/company/smith-midland-corporation
"id": "SMI1786446532",
"linkid": "smith-midland-corporation",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'location': 'Virginia, USA',
'name': 'Smith-Midland Corp.',
'type': 'Corporation'}],
'customer_advisories': '24 months of complimentary credit monitoring and '
'identity protection services through Experian '
'IdentityWorks, including fraud monitoring, identity '
'restoration support, and $1 million in identity theft '
'insurance. Enrollment deadline: October 31, 2026.',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Names, dates of '
'birth, Social '
'Security numbers, '
'driver’s license and '
'state ID numbers, '
'taxpayer '
'identification '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Financial Information',
'Medical Information',
'Health Insurance Data']},
'date_detected': '2025-01-15',
'date_publicly_disclosed': '2026-08-03',
'description': 'Smith-Midland Corp. (SMC), a Virginia-based company, reported '
'a data breach involving unauthorized access to files '
'containing sensitive personal information. The incident was '
'detected on January 15, 2025, after suspicious activity was '
'observed within its network. An investigation revealed that '
'an unknown actor had accessed and acquired certain files, '
'prompting a review to assess the scope of the exposure. The '
'compromised data included names, dates of birth, Social '
'Security numbers, driver’s license and state ID numbers, '
'taxpayer identification numbers, financial account details, '
'medical information, and health insurance data. SMC began '
'notifying affected individuals on August 3, 2026.',
'impact': {'data_compromised': 'Sensitive personal information including '
'names, dates of birth, Social Security '
'numbers, driver’s license and state ID '
'numbers, taxpayer identification numbers, '
'financial account details, medical '
'information, and health insurance data',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'references': [{'source': 'Smith-Midland Corp. Public Notice'}],
'regulatory_compliance': {'regulatory_notifications': ['Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation']},
'response': {'communication_strategy': 'Public notice on website, '
'notification letters to affected '
'individuals, dedicated toll-free '
'helpline, and mailing address for '
'inquiries',
'third_party_assistance': 'Experian IdentityWorks'},
'threat_actor': 'Unknown',
'title': 'Smith-Midland Corp. Data Breach Affecting Sensitive Personal '
'Information',
'type': 'Data Breach'}