Green Mountain Power Data Breach: Vermont Customers' Data Exposed
Green Mountain Power recently reported a data security incident to the Vermont Attorney General, confirming that sensitive personal and financial details of its customers may have been compromised. If you received a notification letter, it means your private information was involved, and understanding your rights is crucial.
- State
- Vermont
- Reported
- September 4, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Mailing Address
- Financial Account Number
- Routing Number
- Energy Consumption and Usage History
- Email Address
Green Mountain Power, a major utility providing essential energy services across Vermont, has formally reported a data security incident. This breach, made public with a filing to the Vermont Attorney General on September 4, 2026, indicates that customer information entrusted to the utility may now be in unauthorized hands. Our team is actively investigating the circumstances surrounding this security failure and how it impacts those affected.
Preliminary reports suggest the exposed data includes highly sensitive categories. Specifically, individuals may have had their Full Name, Social Security Number, Date of Birth, Mailing Address, Financial Account Number, Routing Number, Energy Consumption and Usage History, and Email Address compromised. This combination of personal identifiers and financial data creates a substantial risk for affected customers.
The exposure of such detailed personal information can lead to severe consequences. Malicious actors could use a combination of Full Name, Social Security Number, and Date of Birth for identity theft, opening fraudulent accounts, or even filing false tax returns. Furthermore, the compromise of Financial Account Number and Routing Number directly exposes individuals to potential financial fraud, while Energy Consumption and Usage History could provide insight into household occupancy patterns.
As a utility provider handling critical consumer data, Green Mountain Power has a legal obligation under Vermont state laws to implement robust cybersecurity measures. The occurrence of this data breach raises serious questions about the adequacy of those protections. Companies are expected to safeguard customer data diligently, and failures to do so can have significant legal implications for victims.
If you have received an official data breach notification from Green Mountain Power, your information was directly involved in this incident. Our legal team is reviewing potential class action claims on behalf of individuals whose data was exposed. We offer free case reviews to help you understand your options and explore how we might assist you in pursuing compensation for this data exposure. You pay no out-of-pocket fees, and we only get paid if we secure a recovery for you.
Source: Vermont Attorney General filing