







Victor A. Campanile Insurance Agency (VAC) experienced a major data breach. On or around March 21, 2025, the insurance agency discovered suspicious activity within one of its email accounts. An investigation revealed that two internal email accounts were potentially accessed by a cybercriminal.
A review was completed on Sept. 5, 2025 and Victor A. Campanile Insurance Agency determined that the data breach compromised both personally identifiable information (PII) and protected health information (PHI). Exposed information included names, Social Security numbers, driver's license or state ID copies, medical information and payment information.
VAC began notifying impacted individuals by mail on Sept. 24, 2025. The cybersecurity incident was also disclosed to the Massachusetts Attorney General on Sept. 26, 2025.
The total number of customers involved in the data breach has not been released, but is believed to be in the thousands. This type of cyberattack can be particularly severe due to the volume and sensitivity of information often transmitted via internal company emails.
In response to the incident, VAC immediately changed credentials for affected users and engaged cybersecurity experts. In addition to required state and federal disclosures, the insurance agency is offering impacted customers 24 months of free single-bureau credit monitoring services.
If you receive a notice from VAC about this breach, you may want to:
The agency also established a dedicated assistance line at 888-844-1146, Monday through Friday, 8 a.m. to 11 p.m. Eastern time, and Saturday, 9 a.m. to 6 a.m.
More information about the insurance agency can be found on the VAC Insurance Agency website.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)