This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Maine Course Hospitality Group, a Northeast hotel management company, disclosed a data breach affecting 553 Vermont residents, exposing Social Security numbers, government ID numbers, and health records.
Miles Partnership, LLLP, a travel and tourism marketing firm, disclosed a data breach involving Social Security numbers and financial account information in a filing with the Vermont Attorney General.
Miles Partnership Data Breach Exposes Social Security Numbers and Financial Data Read More »
Goodwin Procter LLP, one of the nation’s largest law firms, has notified clients that an unauthorized party accessed files containing names, Social Security numbers, and financial account details.
SM Energy Company has notified Vermont regulators that a data breach exposed Social Security numbers belonging to individuals connected to the oil and gas producer, with more states likely to follow.
SM Energy Data Breach Exposes Social Security Numbers Read More »
The City of New Britain, Connecticut, disclosed to Vermont regulators that a security incident compromised Social Security numbers and health records tied to individuals connected to the municipality.
The City of New Britain Data Breach Exposes Social Security Numbers and Health Records Read More »
Berg Demo Group notified clients that an unauthorized party accessed its network in June 2026, potentially exposing personal information tied to individual records.
Berg Demo Group Data Breach Exposes Client Personal Information Read More »
Taft Stettinius & Hollister LLP notified Vermont’s Attorney General that a data breach compromised Social Security numbers belonging to a group of its clients, prompting concerns about identity theft.
Taft Stettinius & Hollister Data Breach Exposes Social Security Numbers Read More »
A filing with Vermont’s Attorney General reveals that Herbert Smith Freehills Kramer LLP suffered a breach exposing Social Security numbers, government ID numbers, and health records of at least four Vermont residents.
Sunrise Company has notified California residents that an unauthorized actor accessed its network in April 2026 and acquired files containing personal information.
Sunrise Company Data Breach Exposes Personal Information Read More »
Northwood Country Club, a private club in Meridian, Mississippi, suffered a ransomware attack by the group that may have exposed employee personal and financial information.
Northwood Country Club Data Breach Exposes Employee Personal and Financial Information Read More »