Sterling Seacrest Pritchard Email System Breach May Have Exposed Personal Data of 7,400 People

What happened

An email system breach at Sterling Seacrest Pritchard may have exposed personal data belonging to 7,420 individuals after unauthorized access took place between August 12 and August 13, 2025. Sterling Seacrest Pritchard, an insurance brokerage and risk management company in the Southeastern United States, said it detected unusual activity in its email environment in August 2025 and secured the affected systems. The company then investigated the scope of the incident and completed that process on March 19, 2026. The investigation found that certain information may have been accessed or acquired without authorization. According to the company, the exposed data varied by individual but may have included names and Social Security numbers. A filing with the Maine Attorney General’s Office said 20 Maine residents were among those affected. 

Who is affected

The direct exposure affects 7,420 individuals connected to Sterling Seacrest Pritchard. The company said the compromised information may have included names and Social Security numbers, and the filing cited in the report said 20 affected individuals were Maine residents. 

Why CISOs should care

This incident is relevant because it involves unauthorized access to an enterprise email environment and possible exposure of identity-related information. It also shows the long gap that can exist between initial detection, investigation, and confirmation of the potentially affected data population. 

3 practical actions

1. Validate email-system exposure thoroughly: Confirm exactly which mailboxes, attachments, and identity-related records were accessible during the intrusion window described in the incident. 
2. Align breach support with the exposed data types: Prepare credit monitoring, fraud consultation, and identity restoration support where Social Security numbers or driver’s license information may have been involved. 
3. Track long-tail investigation timelines closely: Ensure leadership understands that the full scope of an email-system breach may take months to establish, especially when the affected information varies by individual. 

For more news about incidents involving exposure of personal information, click Data Breach to read more.