Computer Task Group, Incorporated notified Vermont’s Attorney General in October 2026 that a data breach exposed Social Security numbers, government ID numbers, financial account codes, credit and debit account information, and health records. The number of people affected has not been publicly disclosed. Anyone connected to the company should monitor credit reports and medical statements closely and consider a credit freeze right away.
| Company | Computer Task Group, Incorporated |
|---|---|
| Industry | HR Technology |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Computer Task Group, Incorporated Data Breach?
Computer Task Group, Incorporated recently disclosed a data breach that exposed sensitive personal information belonging to individuals connected to the company. The disclosure came through a formal notification filed with the Vermont Attorney General in October 2026. This filing confirms that unauthorized parties accessed records containing highly sensitive data categories.
Details about how the breach occurred have not been publicly disclosed. The exact discovery date also has not been made public. However, the notification itself, filed in October 2026, indicates the company identified the incident and moved to meet its legal reporting obligations soon after.
As a result of the incident, Computer Task Group reviewed the affected systems and records to determine which data categories were involved. Because the company provides technology and staffing services, this type of breach can affect both employees and clients whose information passes through its systems. The investigation process that led to this notification has not been detailed in public records.
Who was affected?
The notification does not state a specific number of affected individuals. Therefore, the total scope of this breach remains undisclosed at this time. People connected to Computer Task Group through employment, staffing placements, or business relationships could be among those affected.
Because the exposed data includes health records alongside financial and identification details, the affected population may include current or former employees, contractors, or individuals enrolled in benefits programs tied to the company. It is not yet clear whether minors are part of the affected group. Geographic scope has also not been specified, though the filing with Vermont’s Attorney General indicates at least some residents of that state are included.
What Information Was Potentially Exposed?
According to the breach notification, several categories of sensitive personal data were involved in this incident. This information could expose affected individuals to a range of harms if misused. The categories identified include the following.
- Social Security Numbers
- Government ID Numbers
- Financial Account Codes
- Credit and Debit Account Information
- Health Records
This combination of data is especially concerning. For example, Social Security numbers paired with financial account codes can allow criminals to open new credit lines or drain existing accounts. In addition, government ID numbers can be used to create fraudulent identification documents, which makes recovery more complicated for victims.
Health records add another layer of risk. Because medical information can be used for insurance fraud or to obtain prescription drugs illegally, affected individuals may face consequences beyond typical financial fraud. As a result, victims of this breach should watch not only their bank statements but also their medical billing records and insurance statements for unfamiliar activity.
What is the company doing?
Computer Task Group responded to the incident by filing a formal breach notification with state regulators. This step is a legally required action once a company confirms that residents’ personal information was compromised. The company also filed notice with the Vermont Attorney General, as required under state breach notification law.
Beyond the regulatory filing, specific remediation steps such as credit monitoring offers or system security upgrades have not been publicly detailed. Companies in similar situations often work with cybersecurity specialists to close off unauthorized access and strengthen their networks going forward. However, those specific details for this case have not been disclosed publicly.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should check their credit reports regularly for signs of unauthorized activity. Because Social Security numbers and financial account codes were involved, new account fraud is a realistic risk. You can request a free copy of your credit report from each of the three major bureaus.
In addition, look closely for accounts or inquiries you do not recognize. If you spot anything suspicious, report it to the credit bureau immediately. Early detection often makes a significant difference in limiting financial damage.
Consider a Fraud Alert or Credit Freeze
Given that Social Security numbers and financial account details were exposed, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires creditors to verify your identity before opening new accounts in your name. A credit freeze goes further by blocking access to your credit file entirely.
Both options are free to set up with each credit bureau. Although a freeze can be slightly less convenient when applying for new credit yourself, it offers stronger protection. Therefore, individuals concerned about identity theft should seriously consider this step.
Protect Against Healthcare and Insurance Fraud
Because health records were included in this breach, affected individuals should also review their medical and insurance statements closely. Look for unfamiliar providers, services, or prescriptions listed on insurance explanations of benefits. This can be a sign that someone else used your information to receive care.
If you notice anything unusual, contact your health insurance provider right away. Additionally, request a copy of your medical records to check for inaccuracies caused by fraudulent use of your identity.
Stay Alert for Phishing Attempts
Following a breach like this, scammers often use stolen information to craft convincing phishing emails or phone calls. These messages may pretend to be from Computer Task Group, a bank, or even a government agency. Because the scammers may already have some of your real information, these attempts can seem legitimate.
As a result, never click links or share additional personal details in response to unexpected messages. Instead, verify requests directly through official phone numbers or websites. When in doubt, contact the organization independently rather than responding to the message itself.
Consult a Data Breach Attorney
Given the sensitive nature of the exposed data, affected individuals may want to speak with an attorney who focuses on data breach cases. An attorney can help evaluate whether you qualify for compensation through a potential class action. This consultation is often available at no upfront cost.
Because deadlines for legal claims vary by state and circumstance, it helps to act sooner rather than later. A free case evaluation can clarify your options without any obligation to proceed.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General