Green Mountain Power Reports Data Incident to Vermont Regulators

Green Mountain Power, a utility provider in Vermont, has reported a data security incident to the Vermont Attorney General's office. This filing, dated September 4, 2026, indicates an unspecified breach impacting customer data. The company has stated that an investigation into the incident is ongoing.

According to the official report, the exposed data types include Full Name, Social Security Number, Date of Birth, Mailing Address, Financial Account Number, Routing Number, Energy Consumption and Usage History, and Email Address. This combination of personal and financial details carries significant risks for those affected.

The compromise of identifiers such as Full Name, Social Security Number, and Date of Birth can facilitate identity theft, potentially allowing unauthorized individuals to open new accounts or misuse personal information. Exposure of Financial Account Numbers and Routing Numbers could lead to fraudulent financial transactions. Additionally, Email Addresses might be used for targeted phishing attempts, and Energy Consumption and Usage History could potentially inform social engineering scams.

Individuals who receive a data breach notification from Green Mountain Power should take proactive steps to protect themselves. It is advisable to closely review bank and credit card statements for any unusual activity and to monitor credit reports for unauthorized accounts. Placing a fraud alert or security freeze on your credit files with major credit bureaus can add an extra layer of protection.

Remain cautious of unsolicited communications, especially those asking for personal or financial details. Always verify the authenticity of any request for sensitive information directly with Green Mountain Power through official channels. Reviewing personal account statements and being vigilant about online security practices are general recommendations for safeguarding your information.