Summit Insurance Services Data Breach Under Investigation After Months-Long Cybersecurity Incident
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Summit Insurance Services, an independent insurance agency based in Wyoming. The breach, which occurred between September 18, 2024, and December 2, 2024, exposed sensitive personally identifiable information (PII) of an undisclosed number of individuals.
Summit Insurance Services, founded in 1996, provides healthcare insurance solutions including medical, dental, vision, life, and disability plans to businesses and individuals across Wyoming and neighboring states. The company operates offices in Jackson, Star Valley, and Idaho Falls, employing over a dozen staff members.
The breach was officially disclosed to the attorneys general of Maine and Vermont on March 26, 2026, nearly 15 months after its discovery. Summit engaged a national cybersecurity firm to investigate the incident and implement mitigation measures. However, the company has not yet specified what types of consumer data were compromised or the total number of affected individuals.
Affected parties may be eligible for compensation, including reimbursement for time spent addressing the breach, out-of-pocket expenses, or emotional distress. Legal representatives are reviewing potential claims for those who received breach notifications or suspect their data was exposed.
Source: https://www.claimdepot.com/investigations/summit-insurance-data-breach-2026
Summit Insurance Services, LLC cybersecurity rating report: https://www.rankiteo.com/company/summit-insurance-services-llc
"id": "SUM1774658041",
"linkid": "summit-insurance-services-llc",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Insurance',
'location': 'Wyoming, USA',
'name': 'Summit Insurance Services',
'size': 'Over a dozen staff members',
'type': 'Independent Insurance Agency'}],
'customer_advisories': 'Affected parties may be eligible for compensation, '
'including reimbursement for time spent addressing the '
'breach, out-of-pocket expenses, or emotional '
'distress.',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally identifiable '
'information (PII)'},
'date_detected': '2024-12-02',
'date_publicly_disclosed': '2026-03-26',
'description': 'Shamis & Gentile P.A. is investigating a cybersecurity '
'incident involving Summit Insurance Services, an independent '
'insurance agency based in Wyoming. The breach occurred '
'between September 18, 2024, and December 2, 2024, exposing '
'sensitive personally identifiable information (PII) of an '
'undisclosed number of individuals.',
'impact': {'data_compromised': 'Sensitive personally identifiable information '
'(PII)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential compensation claims for affected '
'parties'},
'investigation_status': 'Under Investigation',
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Potential class action '
'investigation',
'regulatory_notifications': 'Maine and Vermont '
'Attorneys General'},
'response': {'third_party_assistance': 'National cybersecurity firm'},
'title': 'Summit Insurance Services Data Breach',
'type': 'Data Breach'}