Perruzi Buick GMC, Inc. notified the Vermont Attorney General in June 2026 that a data breach exposed customers’ Social Security numbers and health records. The total number of people affected has not been publicly disclosed. Anyone who did business with the dealership should monitor credit reports, consider a credit freeze, and watch for phishing attempts immediately.
| Company | Perruzi Buick GMC, Inc. |
|---|---|
| Industry | Automotive Technology |
| Data Types Exposed | Social Security Numbers, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
What Happened in the Perruzi Buick GMC, Inc. Data Breach?
Perruzi Buick GMC, Inc. recently confirmed that it experienced a data breach involving sensitive customer information. The dealership filed a formal notification describing the incident to state regulators in June 2026. As a result, affected individuals are now learning that their personal data may have been compromised.
Details about how the breach occurred have not been publicly disclosed. However, the notification confirms that unauthorized access to sensitive files did take place. The exact discovery date of the incident has not been publicly disclosed either, though the dealership moved to notify state authorities and affected consumers once it understood the scope of the problem.
Following the discovery, Perruzi Buick GMC, Inc. appears to have taken steps to assess what data was involved. This likely included a forensic review to determine which records were accessed. Because the notification specifically names Social Security numbers and health records as impacted categories, the investigation clearly identified highly sensitive data types among the exposed files.
Data breaches involving a car dealership can be surprising to consumers. Nevertheless, dealerships routinely collect extensive personal and financial information during financing and insurance processes. This makes them a meaningful target for attackers seeking valuable personal data.
Who was affected?
The individuals affected by this incident are most likely customers of Perruzi Buick GMC, Inc. In some cases, employees could also be included among those impacted. Because the notification does not specify which group was affected, both possibilities remain open.
At this time, the total number of people affected has not been publicly disclosed. This means consumers cannot yet know the full scale of the breach. In addition, the geographic scope of affected individuals is unclear, though it likely includes customers connected to the dealership’s service area.
It is also not confirmed whether minors are among those affected. Given that health records were involved, it’s possible that dependents or family members tied to insurance or financing paperwork could also be impacted. Anyone who has done business with this dealership should consider themselves potentially at risk until more information becomes available.
What Information Was Potentially Exposed?
According to the breach notification, two categories of sensitive data were involved. This combination is especially concerning because it merges financial identity data with private medical information.
- Social Security Numbers
- Health Records
The exposure of Social Security numbers creates a serious identity theft risk. With this single data point, criminals can often open new financial accounts, file fraudulent tax returns, or apply for loans in a victim’s name. Because Social Security numbers rarely change, this type of exposure can create risk that lingers for years.
Health records carry their own distinct dangers. For example, exposed medical information can be used for medical identity theft, where a criminal uses someone else’s identity to obtain treatment or prescriptions. This can also lead to inaccurate medical records for the victim, which may complicate future healthcare or insurance claims.
What is the company doing?
In response to the breach, Perruzi Buick GMC, Inc. filed official notification paperwork describing the incident. This step is a legally required part of responding to breaches involving sensitive personal data. As a result, affected individuals and regulators were formally alerted to the situation.
The dealership also filed notice with the Vermont Attorney General. This filing helps ensure regulatory oversight of the company’s breach response. It also creates a public record that consumer advocates and affected individuals can reference.
Beyond notification, further remediation details have not been publicly disclosed. It remains unclear whether credit monitoring or identity protection services are being offered to affected individuals. Anyone who receives a notification letter should read it carefully, since it may include specific instructions or protective offers not yet reflected in public reporting.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should begin checking their credit reports regularly. This is one of the most effective ways to catch fraudulent activity early. You can request free credit reports from all three major credit bureaus.
Because Social Security numbers were involved, this step is especially important. Look for unfamiliar accounts, unexpected credit inquiries, or sudden changes to your credit score. If you spot something suspicious, report it to the credit bureau immediately.
Consider a Fraud Alert or Credit Freeze
Given that Social Security numbers were exposed, placing a fraud alert on your credit file is a smart precaution. A fraud alert requires lenders to verify your identity before opening new credit in your name. This adds a valuable layer of protection at little cost to you.
For even stronger protection, consider a credit freeze. This restricts access to your credit file entirely, making it much harder for identity thieves to open accounts. While a freeze requires a few extra steps when you apply for credit yourself, it offers strong peace of mind.
Protect Against Medical Identity Theft
Because health records were part of this breach, affected individuals should also watch for signs of medical identity theft. This means reviewing insurance statements and medical bills for unfamiliar charges or services. Contact your healthcare provider or insurer right away if anything looks off.
In addition, request a copy of your medical records periodically to check for inaccuracies. If someone else’s treatment history gets mixed with yours, it could affect your future care. Correcting these errors early can prevent bigger complications down the road.
Stay Alert to Phishing Attempts
After a breach, scammers often try to exploit fear by sending fake emails or texts claiming to be from the breached company. Be cautious of any message asking you to click a link or provide personal information. Instead, contact the company directly using a verified phone number or website.
Because criminals may combine stolen data with public information to make scams more convincing, extra caution is warranted. Never provide sensitive information in response to an unsolicited message. When in doubt, verify independently before responding.
Consult a Data Breach Attorney
If you received a notification letter, it may be worth speaking with a data breach attorney. An attorney can help you understand your legal rights and whether you qualify for compensation. Many offer free consultations to evaluate your situation.
Because this breach involved both Social Security numbers and health records, potential damages could be significant. A qualified attorney can help you weigh your options, including participation in any class action that may arise from this incident.
More Information
View the public data breach notification listing from Vermont Attorney General