Almeida Law Group is investigating a data breach at Green Mountain Power. If you were affected, contact Almeida Law Group.
About Green Mountain Power
Green Mountain Power (GMP) is an investor-owned electric utility company incorporated in Vermont in 1893 and headquartered in Colchester, Vermont. It serves over 260,000 residential and business customers across Vermont, providing electricity generated from hydro, wind, solar, and biomass sources. GMP is a subsidiary of Énergir and is the only utility in the United States to earn B Corp certification.
What Happened?
Green Mountain Power was listed in a Vermont Attorney General breach report summary filed on September 4th, 2026. The filing identifies the organization as “Other Commercial” and reports that the following categories of personal information were exposed: Social Security Numbers, financial account codes, and credit and debit account information. No additional details about the incident type, the number of people affected, or the method of compromise were included in the filing.
No independent media coverage, cybersecurity reporting, or ransomware group claims specific to this breach were identified beyond the Vermont Attorney General’s report. The notification date, total persons affected, and whether identity theft protection was offered were not specified in the available source materials.
Key Facts at a Glance
- Company or Organization: Green Mountain Power
- Industry: Electric utility (investor-owned)
- Location: Colchester, Vermont
- Date breach discovered: September 4th, 2026
- Data types exposed: Social Security Numbers, financial account codes, credit and debit account information
- Litigation status: No class action lawsuits connected to this breach were identified as of the research date
- Source: Vermont Attorney General Breach Report, AFDC – Green Mountain Power Utility Profile, WattBuy – Green Mountain Power Profile
What Should You Do?
If you received a notice from Green Mountain Power, act promptly to protect your financial accounts and credit. Because Social Security Numbers, financial account codes, and credit and debit account information were involved, you should place a fraud alert or credit freeze with each of the three major credit bureaus—Equifax, Experian, and TransUnion—and monitor your credit reports for unfamiliar accounts or inquiries. You can request free credit reports at AnnualCreditReport.com. Watch closely for unauthorized transactions on any linked bank or card accounts and report suspicious activity to your financial institution right away. If you experience identity theft, visit IdentityTheft.gov for step-by-step recovery assistance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.