Chevy Chase Club notified the Vermont Attorney General that a data breach exposed Social Security numbers belonging to members, employees, or both. The exact number affected and how the breach occurred have not been publicly disclosed. Anyone connected to the club should monitor credit reports closely and consider placing a credit freeze right away.
| Company | Chevy Chase Club |
|---|---|
| Industry | Non-profit |
| Data Types Exposed | Social Security Numbers |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Chevy Chase Club Data Breach?
Chevy Chase Club recently filed a formal data breach notification with the Vermont Attorney General’s office. The filing confirms that an incident exposed sensitive personal data belonging to members, employees, or both. As a result, the club now joins a growing list of organizations reporting unauthorized access to personal records this year.
According to the notification, the exposed information included Social Security numbers. However, the filing does not specify how the breach occurred or which systems were affected. The club has not publicly disclosed when the breach was first discovered, though the notification itself was submitted in October 2026.
Because the notification came through an official state filing, it reflects a confirmed incident rather than an unverified claim. Typically, organizations in this position conduct an internal investigation before notifying regulators. This process usually involves forensic specialists who work to determine the scope of the intrusion and which individuals were impacted.
Who was affected?
The exact number of people affected by the Chevy Chase Club data breach has not been publicly disclosed. Given that the club operates as a private membership organization, those affected could include current members, former members, employees, or a combination of these groups.
Because Social Security numbers were involved, the exposure likely touched individuals whose personal data was stored for administrative, payroll, or membership-related purposes. In addition, the geographic scope of affected individuals has not been detailed in the filing. Readers who believe they may be connected to the club should watch for a direct notification letter, since that will contain specifics about their individual exposure.
What Information Was Potentially Exposed?
The Vermont Attorney General filing confirms a limited but highly sensitive category of exposed data. This information carries meaningful risk if it falls into the wrong hands.
- Social Security Numbers
Social Security numbers are among the most valuable pieces of data for criminals because they can be used to open new credit accounts, file fraudulent tax returns, or impersonate victims in official settings. Unlike a password, a Social Security number cannot simply be changed, which means the risk from this type of exposure can last for years.
As a result, individuals connected to Chevy Chase Club should treat this incident seriously. Identity thieves often wait months or even years before using stolen Social Security numbers, so ongoing vigilance matters more than a one-time check. In addition, stolen Social Security numbers are frequently bundled and sold on dark web marketplaces, which can expose victims to risks from multiple bad actors over time.
What is the company doing?
Chevy Chase Club responded to the incident by filing an official notification with the Vermont Attorney General. This step reflects the club’s compliance with state data breach notification laws, which require timely disclosure when residents’ personal information is compromised.
Beyond the regulatory filing, the publicly available information does not detail every remediation step the club has taken. However, organizations that file these notifications typically also work to secure affected systems, review access controls, and notify impacted individuals directly by mail. Affected individuals should watch for a formal letter that may include additional details and information about any protective services offered.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Anyone connected to Chevy Chase Club should request a free copy of their credit report from each of the three major credit bureaus. Reviewing these reports regularly can help you catch unfamiliar accounts or inquiries before they cause serious damage.
Because Social Security number theft can lead to long-term fraud risk, it helps to check your reports periodically rather than just once. Many people set reminders every few months to review their credit activity, which makes it easier to spot anything unusual quickly.
Consider a Credit Freeze or Fraud Alert
Since Social Security numbers were involved in this breach, placing a credit freeze with each bureau is one of the strongest protective steps available. A freeze blocks new creditors from accessing your file, which makes it much harder for identity thieves to open accounts in your name.
Alternatively, a fraud alert requires lenders to take extra verification steps before approving new credit. This option is less restrictive than a freeze but still adds a meaningful layer of protection. Either way, acting sooner rather than later reduces the window of opportunity for criminals.
Watch for Phishing and Scam Attempts
Following a data breach, criminals often use stolen information to craft convincing phishing emails, texts, or phone calls. Therefore, affected individuals should be cautious of unexpected messages that ask for personal or financial details.
Legitimate organizations rarely request sensitive information by email or text. If you receive a suspicious message claiming to be from Chevy Chase Club or a related service, verify it independently before clicking any links or responding.
Consult a Data Breach Attorney
Because this incident involved Social Security numbers, affected individuals may want to speak with an attorney who focuses on data breach cases. A free consultation can help clarify whether you qualify for compensation or participation in a potential class action.
Attorneys experienced in this area can also help you understand your rights under state and federal law. This guidance can be especially useful if you experience financial harm connected to this breach in the future.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General