Summit reported a data breach to the Attorney General of New Hampshire, revealing that an unauthorized party gained access to its corporate systems on October 5, 2025. The investigation confirmed that sensitive personal identifiable information (PII)—including names, Social Security numbers, and contact details—was accessed and potentially acquired by the attacker. The breach impacted individuals variably, with no immediate confirmation of misuse but a high risk of identity theft or fraud. Summit initiated notifications to affected individuals on November 21, 2025, offering 24 months of complimentary credit monitoring as a remedial measure. The incident underscores a significant compromise of customer data, though no ransomware or broader systemic disruption was reported. The exposure of SSNs and personal details elevates the risk of long-term financial and reputational harm for victims, while Summit faces regulatory scrutiny and potential erosion of trust.