Penquis CAP data breach
Penquis CAP has reported a data breach to the Vermont Attorney General's office on October 6, 2026. This incident involved the exposure of sensitive personal and financial data, potentially impacting clients who rely on their essential services. Affected individuals should understand their rights and next steps.
Docket sheet
- Company
- Penquis CAP
- Venue
- Vermont Attorney General
- Filed
- October 6, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Vermont Attorney GeneralOctober 6, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Home Address
- Income and Financial Records
- Household Demographic Information
- Government Assistance Program Details
- Telephone Number and Email Address
Clerk's notes
Penquis CAP, a Vermont-based community action agency, filed a report on October 6, 2026, indicating a data security incident. This filing alerts state authorities to a potential compromise of confidential information held by the organization, which provides essential services to low-income individuals and families. The investigation into this breach is currently monitoring the situation.
The reported breach at Penquis CAP involved a range of highly sensitive personal and financial information. Exposed data categories include Full Name, Social Security Number, Date of Birth, Home Address, Income and Financial Records, Household Demographic Information, Government Assistance Program Details, Telephone Number, and Email Address. This specific combination of data types creates significant risks, potentially exposing individuals to identity theft, financial fraud, and targeted social engineering schemes.
Organizations like Penquis CAP are entrusted with safeguarding client data, subject to state data protection statutes, the Federal Trade Commission Act, and other applicable federal regulations. These laws mandate robust administrative, technical, and physical security measures to prevent unauthorized access and protect sensitive records. The occurrence of a widespread data breach strongly suggests that existing safeguards may have been insufficient to protect the information under their care.
If you have received an official data breach notification letter from Penquis CAP, it serves as formal legal acknowledgment that your private information was compromised due to this incident. Receiving such a notice establishes a basis to understand your legal options, even if you have not yet experienced direct financial loss or identity theft. Individuals seeking to learn more about their rights and potential legal recourse following this incident are encouraged to request a free case review.
If a notification letter about this breach reached you, see every Vermont data breach on file or browse all cases.
Other Vermont docket entries
- Nephrology AssociatesVermont AGNovember 6, 2026Monitoring
- IronBridge Wealth Counsel, LLCVermont AGNovember 6, 2026Monitoring
- Insight Credit UnionVermont AGNovember 6, 2026Monitoring
- Family Implant and DentistryVermont AGNovember 6, 2026Monitoring
- Amplifon (USA), Inc.Vermont AGNovember 5, 2026Monitoring
- UFP technologies,Vermont AGNovember 5, 2026Monitoring
- Xplicit Audio LLCVermont AGNovember 5, 2026Monitoring
- Killingly Public Schools (KPS)Vermont AGNovember 5, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.