Apex Clean Energy Holdings, LLC disclosed a data breach to the Vermont Attorney General in November 2026, confirming exposure of Social Security numbers, government ID numbers, financial account codes, credit and debit information, and health records. The number of affected individuals has not been disclosed. Anyone who may be affected should place a credit freeze and monitor financial and medical statements closely.
| Company | Apex Clean Energy Holdings, LLC |
|---|---|
| Industry | Energy |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Apex Clean Energy Holdings, LLC Data Breach?
Apex Clean Energy Holdings, LLC recently filed a formal data breach notification with the Vermont Attorney General. The filing confirms that unauthorized parties gained access to sensitive personal information belonging to individuals connected to the company. This disclosure, made in November 2026, puts the Apex Clean Energy Holdings data breach on the public record for the first time.
The exact method attackers used to breach the company’s systems has not been publicly disclosed. Similarly, the specific date when the intrusion first occurred remains unknown. What is clear, however, is that the breach resulted in exposure of multiple categories of highly sensitive personal data, including Social Security numbers and health records.
Because this notification came through a state attorney general filing, it represents a confirmed disclosure rather than an unverified claim. As a result, Apex Clean Energy Holdings has acknowledged the incident through official channels. The company likely worked with forensic investigators to determine the scope of the breach before notifying regulators and affected individuals, though further technical details have not been shared publicly.
Who was affected?
The population affected by this breach has not been specified in the available filing. In general, breach notifications of this kind typically affect current or former employees, customers, or other individuals whose data the company stored. Without further detail, it is not possible to say definitively which group bears the brunt of this incident.
Additionally, the exact number of people impacted has not been publicly disclosed. Because Apex Clean Energy Holdings operates in the renewable energy sector, affected individuals could potentially include employees, contractors, or business partners. Vermont residents are among those protected under this notification, though the breach may extend to residents of other states as well.
What Information Was Potentially Exposed?
According to the breach notification, several sensitive categories of personal data were involved in this incident. This combination of financial, governmental, and health-related information creates considerable risk for anyone affected. The following categories were specifically identified in the filing.
- Social Security Numbers
- Government ID Numbers
- Financial Account Codes
- Credit and Debit Account Information
- Health Records
This mix of data is particularly concerning because it covers nearly every angle criminals need for identity theft. For instance, a Social Security number combined with a government ID number gives fraudsters enough material to open new credit lines or file fraudulent tax returns. Meanwhile, exposed financial account codes and card details could lead directly to unauthorized charges or drained accounts.
Health record exposure adds another layer of risk. Criminals can use medical information to commit healthcare fraud, such as submitting fraudulent insurance claims or obtaining prescription drugs under someone else’s identity. Because this type of fraud can go unnoticed for a long time, victims may not discover the misuse until significant damage has already occurred.
What is the company doing?
Apex Clean Energy Holdings responded to the incident by filing a formal notification with state regulators, as required by law. This step indicates the company has investigated the breach internally and determined which data categories were compromised. In addition, the company filed notice with the Vermont Attorney General, fulfilling its legal obligation to disclose the breach to regulators.
Beyond the regulatory filing, specific details about remediation steps, such as whether credit monitoring or identity protection services were offered, have not been publicly disclosed. Companies in similar situations often provide these services to affected individuals as a goodwill gesture and to reduce potential liability. However, until Apex Clean Energy Holdings releases further details, affected individuals should assume they need to take protective action on their own.
What Should Affected Individuals Do?
Place a Fraud Alert or Credit Freeze
Given that Social Security numbers and financial account information were exposed, affected individuals should strongly consider placing a fraud alert or credit freeze with the three major credit bureaus. A credit freeze prevents new creditors from accessing your credit report, which makes it much harder for criminals to open accounts in your name.
To set this up, contact Equifax, Experian, and TransUnion directly. Each bureau allows consumers to freeze their credit for free, and you can lift the freeze temporarily whenever you need to apply for new credit. This remains one of the most effective tools against identity theft following a breach like this one.
Monitor Your Credit Reports Closely
Regularly checking your credit reports can help you catch suspicious activity early. Because fraudulent accounts can appear months after a breach, ongoing vigilance matters more than a one-time check.
You are entitled to a free credit report from each major bureau once a year through AnnualCreditReport.com. In addition, many banks and credit card companies offer free credit monitoring tools. Reviewing these reports every few months can help you spot unauthorized accounts or inquiries before they cause lasting damage.
Watch for Healthcare Fraud
Since health records were part of this breach, affected individuals should review any insurance statements or medical bills closely for unfamiliar charges. Medical identity theft can lead to incorrect information appearing in your health records, which can create dangerous complications during future treatment.
If you notice unfamiliar claims or services on insurance statements, contact your health insurer immediately. Requesting a copy of your medical records and checking them for inaccuracies is also a smart precaution, especially in the months following this type of exposure.
Stay Alert for Phishing Attempts
After a breach involving this much personal data, scammers often follow up with phishing emails, texts, or phone calls designed to extract even more information. These messages may appear to come from Apex Clean Energy Holdings, a bank, or a government agency.
Therefore, never click on links or provide personal details in response to unsolicited messages. Instead, verify any communication by contacting the organization directly using a phone number or website you know is legitimate. This simple habit can prevent a second wave of fraud following the initial breach.
Consider Consulting a Data Breach Attorney
Because this breach involved highly sensitive categories like Social Security numbers and health records, affected individuals may have grounds to pursue legal action. Consulting with a data breach attorney can help you understand your rights and whether you qualify for compensation.
Many attorneys offer free case evaluations, so there is little downside to exploring your options. An attorney can also help you determine whether a class action lawsuit has been filed or is likely to be filed related to this incident.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General