Green Mountain Power Data Breach: What Vermont Customers Should Know

Green Mountain Power, an essential utility provider in Vermont, disclosed a data breach on September 4, 2026. This incident involved unauthorized access to sensitive customer data, raising concerns for the hundreds of thousands of residential, commercial, and municipal customers served by the company. The specific details regarding how the breach occurred remain under investigation, but such events often stem from sophisticated cyberattacks targeting critical infrastructure providers.

The reported exposed data categories include Full Name, Social Security Number, Date of Birth, Mailing Address, Financial Account Number, Routing Number, Energy Consumption and Usage History, and Email Address. This combination of personal and financial information creates significant risks for individuals whose data was compromised. While Green Mountain Power is investigating, understanding the potential impact of these exposed data types is crucial for affected customers.

Exposure of your Full Name, Social Security Number, and Date of Birth can lead to severe identity theft, allowing criminals to open new lines of credit, file fraudulent tax returns, or access existing accounts. Furthermore, the compromise of your Mailing Address, Financial Account Number, and Routing Number puts you at direct risk of financial fraud. Unauthorized parties could initiate transactions or use this information for targeted phishing scams. Even your Energy Consumption and Usage History, when combined with other data, can paint a detailed picture of your habits, making you a target for various malicious activities.

Companies like Green Mountain Power are entrusted with safeguarding highly sensitive personal information and are expected to maintain robust cybersecurity measures. The occurrence of a data breach suggests that these protective measures may have been insufficient, potentially indicating a failure to meet their legal obligations to protect customer data. State and federal laws often require utilities to implement stringent security protocols to prevent such incidents.

If you have received an official data breach notification letter from Green Mountain Power, it confirms that your personal information was part of this security incident. Receiving this letter is an important first step, and it establishes your standing to seek legal recourse. We are currently reviewing the details of this breach and investigating potential class action claims on behalf of affected customers. Learning more about your legal options may help you understand your rights and potential next steps without any out-of-pocket cost.