Charlottesville Settlement Company Data Breach: What Home Buyers Should Know
An intruder was in the network in September 2025. Nobody knew until March 2026 — a six-month gap during which the data of 22,041 people, gathered for real estate closings, sat in unknown hands. Here is the case as it stands, and why real estate settlement files are unusually dangerous to lose.
Revisado Editorialmente — Contenido revisado en cuanto a exactitud utilizando investigación legal publicada, datos gubernamentales y registros judiciales verificados. Vea nuestra metodología
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened
Charlottesville Settlement Company is a Virginia real estate settlement and title company — the business that handles closings, escrow and title work when property changes hands. (Despite the name, this has nothing to do with lawsuit settlements; the term “settlement company” in real estate means the closing agent.) An unknown actor gained unauthorized access to its network on 2 September 2025, and unusual activity was observed on 4 September 2025. The breach was discovered on 10 March 2026, and written notification to consumers began 18 March 2026, with a filing to the Vermont Attorney General. 22,041 people are affected. The incident also reaches two affiliated companies: Shenandoah Settlement Services LLC (now trading as High Crest Settlement) and Freedom Settlement Services LLC (formerly Seven Hills Settlement).
Case Details
As of 24 August 2026 no settlement exists and we could confirm no filed class action. What is underway is investigation: at least five plaintiffs' firms — Lynch Carpenter, Migliaccio & Rathod, Cole & Van Note, Markovits Stock & DeMarco and Bryson Harris Suciu & DeMay — have publicly opened inquiries and are speaking with affected consumers. That level of firm interest in a breach of this size usually precedes filings. The company offered complimentary IDX credit monitoring and identity theft protection including a $1,000,000 reimbursement policy, with an enrollment deadline of 18 June 2026 — that window has now closed.
Status as of 24 August 2026
Who Is Affected — and Why This Data Is Especially Sensitive
The 22,041 people whose information was held by Charlottesville Settlement Company or its affiliates — in practice, anyone who bought, sold or refinanced property through these companies. Real estate closing files are among the most concentrated collections of personal data that exist: they typically contain Social Security numbers, full bank account and routing details, mortgage documents, loan applications, government identification and complete financial statements — everything assembled in one place to complete a transaction. That is materially more than a typical retail breach exposes. If you closed on a Virginia property through Charlottesville, High Crest/Shenandoah or Seven Hills/Freedom and received a letter dated around 18 March 2026, you are in the affected group.
The Specific Risk: Wire Fraud and Long-Tail Identity Theft
How This Unfolded
- 1
2 September 2025 — the intrusion
An unknown actor gains unauthorized access to the Charlottesville Settlement Company network.
- 2
4 September 2025 — unusual activity observed
The company notes unusual activity in its network environment. The breach is nonetheless not identified as such at this point.
- 3
10 March 2026 — discovery
The breach is discovered — roughly six months after the initial access.
- 4
18 March 2026 — notification
Written notice goes to consumers and to the Vermont Attorney General; 22,041 people are affected across three affiliated settlement companies. IDX monitoring is offered with an 18 June 2026 enrollment deadline.
- 5
24 August 2026 — where things stand
At least five law firms are investigating. No filed class action we could confirm, no settlement, no claim deadline. The IDX enrollment window has closed.
Three Things to Watch
Stolen closing files enable a specific and expensive kind of fraud. These matter more than usual.
“Updated wiring instructions” for a closing
The single most dangerous consequence of a title company breach. Criminals with your file know your closing date and amount. Always verify wiring details by calling a number you looked up yourself — never one from an email, however authentic it looks.
“File your Charlottesville settlement claim”
No settlement exists. And note the name collision: this is a real estate settlement company, not a lawsuit settlement fund. Any site offering a claim form is not describing this breach.
Calls referencing your property purchase
A caller who knows your address, lender and closing date sounds credible because they read your file. Neither your title company nor your lender will call asking you to confirm bank details or move funds. Hang up, call back on a verified number.
Common Questions
Is this the city of Charlottesville?
No. Charlottesville Settlement Company is a private real estate settlement and title business. In real estate, “settlement” means the closing of a property transaction — unrelated to a lawsuit settlement.
Has a lawsuit been filed?
We could confirm none as of 24 August 2026. Five plaintiffs' firms have publicly opened investigations, which is the step that typically precedes filing. Speaking with one costs nothing — these cases run on contingency.
I missed the IDX enrollment deadline. What now?
The 18 June 2026 window has closed, but freezes at Equifax, Experian and TransUnion are free by law, take minutes online, and prevent new credit being opened in your name — stronger protection than monitoring, which only tells you after the fact.
Which companies are covered?
Charlottesville Settlement Company plus its affiliates Shenandoah Settlement Services LLC (now High Crest Settlement) and Freedom Settlement Services LLC (formerly Seven Hills Settlement). A closing through any of them may place you in the affected group.
Why does a six-month delay matter?
Because the data was in unknown hands from September 2025 while nobody was watching for consequences. Fraud attempts from that period may not have been connected to a breach at the time. Pull bank and credit records back to autumn 2025 — anything unexplained is worth documenting now.
What was in the files?
Real estate closing files typically contain Social Security numbers, bank account and routing numbers, loan applications, mortgage documents, government identification and financial statements. The official notice you received states which elements applied to you specifically.
How do I verify this page?
Through the Vermont Attorney General's published breach notice dated 18 March 2026, your own notification letter, and the investigating firms' public statements. Details here reflect what we could confirm as of 24 August 2026.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.