2026 Corporation Service Company (CSC) — CL0P third-party DB theft Aug 2025; 5,678 (CA AG); SSNs

Verified company notification — August 13, 2026. Corporation Service Company (CSC), a registered-agent and corporate-services provider headquartered in Wilmington, Delaware, notified individuals that an unauthorized actor accessed a third-party hosted database between August 10 and August 25, 2025, and copied certain files. CSC says it learned of suspicious network activity, completed a file review on July 15, 2026, and began mailing notices August 13, 2026 (Vermont AG filing). The CL0P (Cl0p) ransomware group publicly listed CSC on its leak site on October 21, 2025; CSC reported discovery around October 24, 2025 in subsequent summaries. Exposed data includes Social Security numbers plus names, DOBs, addresses, government IDs, and payment information per notice summaries and class-action trackers. California Attorney General reporting cited 5,678 affected individuals (Emery Reddy summary of CA filing); broader census may grow as other states publish. CSC offers 12 months Cyberscout/TransUnion credit monitoring. Distinct from CSC ServiceWorks (`csc-serviceworks-2024-ca`). recordsAffected 5678 from CA AG filing via Emery Reddy at indexing.