Penquis CAP Reports Data Security Incident to Vermont AG

Penquis CAP, a community action agency providing essential services in Vermont, officially reported a data security incident to the state's Attorney General's office on October 6, 2026. While the specific nature of the breach was not detailed in the public filing, this notification confirms that an unauthorized event compromised the security of information held by the organization.

The types of data reportedly exposed in this incident include Full Name, Social Security Number, Date of Birth, Home Address, Income and Financial Records, Household Demographic Information, Government Assistance Program Details, Telephone Number, and Email Address. The combination of these categories of personal and financial information raises significant concerns for affected individuals.

Such an exposure of sensitive data could potentially lead to various forms of misuse. Individuals affected by this incident should exercise caution and take proactive measures to safeguard their information. This includes carefully reviewing financial statements and credit reports for any suspicious activity and considering placing a fraud alert or security freeze on their credit files.

It is also advisable for those who receive a notification to update passwords for their online accounts, particularly for services that might have used similar credentials. Remaining vigilant against phishing attempts or unexpected communications requesting personal details is an important general precaution. Individuals should rely on official communications from Penquis CAP for specific instructions.

This information is based on public disclosures made to regulatory authorities in Vermont. The investigation into the full extent and cause of the Penquis CAP data security incident is noted as ongoing.