DataBreachCaseFile.com
MonitoringVermont AG filing · September 4, 2026

Green Mountain Power Reports Data Incident Affecting Vermont Customers

Green Mountain Power, a Vermont utility provider, reported a data security incident on September 4, 2026, impacting an unspecified number of its customers. The incident exposed sensitive personal and financial data, potentially putting individuals at risk of identity theft and fraud.

State
Vermont
Reported
September 4, 2026

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Mailing Address
  • Financial Account Number
  • Routing Number
  • Energy Consumption and Usage History
  • Email Address

Green Mountain Power, a utility serving customers across Vermont, filed notice of a data security incident on September 4, 2026. This report, filed with regulatory bodies, indicates a compromise of customer information. The company has stated that an investigation into the nature and scope of the incident is ongoing.

The reported data exposure includes a range of personal identifiers and financial details. Specifically, the compromised information includes Full Name, Social Security Number, Date of Birth, Mailing Address, Financial Account Number, Routing Number, Energy Consumption and Usage History, and Email Address. These details were identified as part of the security event.

The exposure of such comprehensive personal and financial data carries significant risks for affected individuals. Compromised Social Security Numbers and Dates of Birth can be used for identity theft, potentially leading to fraudulent accounts or tax filings. Financial Account Numbers and Routing Numbers could expose individuals to direct financial fraud.

Energy Consumption and Usage History, while seemingly innocuous, can reveal patterns of occupancy or habits, which could be exploited. Email addresses are often used in phishing attempts to gain further access to personal accounts.

Individuals who receive a formal notification from Green Mountain Power should remain vigilant. It is recommended to carefully review financial statements and credit reports for any suspicious or unauthorized activity. Consider placing a fraud alert or credit freeze with the major credit bureaus to help prevent new accounts from being opened in your name.

Additionally, exercise caution regarding unsolicited communications, especially those requesting personal or financial information. Only respond to legitimate inquiries through verified contact methods. These are general protective steps for any data incident.

Source: Vermont Attorney General filing

More Vermont data breach cases