SOC Data Breach: Email Account Compromised Medical Records

SOC, a Day & Zimmermann company, a defense and security contractor based in Chantilly, Virginia, disclosed a data breach involving unauthorized access to a company email account.

On June 2, 2026, SOC was alerted to suspicious activity involving unauthorized access to a single company email account. The company launched an investigation to determine the scope of the incident and to identify what personal information may have been involved.

The investigation determined that the breach was isolated to the one affected email account. No details were provided about who may have been responsible for gaining access to the email account or how the compromise occurred.

Despite the limited scope, SOC acknowledged that it cannot rule out the possibility that information contained within the email account may have been accessed or viewed by the unauthorized party. As a result, the company treated all information stored in the account as potentially exposed and moved forward with notifying affected individuals.

The types of personal information that may have been exposed include first and last names, Social Security numbers and medical records.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on July 17, 2026. SOC began sending notification letters to affected individuals on July 15, 2026.

SOC's response to the breach

SOC is offering affected individuals a total of 18 months of credit monitoring services at no cost. To use this benefit, individuals may choose a credit monitoring provider of their preference, enroll in the service and then submit documentation of their enrollment and payment to Day & Zimmermann for reimbursement.

Individuals who have questions or need additional information about the incident can contact Day & Zimmermann directly by phone at 267-804-5322 or by email at Privacy@dayzim.com.

Written correspondence can also be sent to Day & Zimmermann at 1835 Market St., Philadelphia, PA 19103.