Chisholm, Persson & Ball, P.C. filed a Vermont data breach notification confirming exposure of Social Security numbers, government ID numbers, financial account codes, credit and debit account information, and health records. The number of people affected has not been publicly disclosed. Affected individuals should place a credit freeze or fraud alert immediately and watch closely for identity theft and phishing attempts.
| Company | Chisholm, Persson & Ball, P.C. |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Chisholm, Persson & Ball, P.C. Data Breach?
Chisholm, Persson & Ball, P.C. recently filed a formal data breach notification with the Vermont Attorney General. The filing confirms that sensitive personal information tied to the firm’s clients or associated individuals was involved in a security incident. As a result, affected people are now being notified under state breach notification law.
The firm has not publicly disclosed the exact date it discovered the breach. However, the notification to Vermont regulators was filed in October 2026. Because many breach notification laws require filings soon after discovery, this timing suggests the firm identified and responded to the incident before notifying the state.
At this time, the public record does not include details about how the breach occurred or who was responsible. In addition, there is no published information describing the specific method of attack, such as whether it involved hacking, ransomware, or another form of unauthorized access. The firm’s regulatory filing represents the most concrete confirmation available that personal data was compromised.
Who was affected?
The breach may affect individuals whose personal or financial records were handled by Chisholm, Persson & Ball, P.C. Because the firm filed with the Vermont Attorney General, at least some affected individuals are Vermont residents. However, breaches reported to a single state’s regulator often include people living in other states as well.
The exact number of individuals affected has not been publicly disclosed. This means the scope of the breach, whether it touches a small group or a much larger population, remains unclear. Until more information becomes available, affected individuals should assume their data could be at risk and take protective steps accordingly.
What Information Was Potentially Exposed?
According to the firm’s filing, several categories of sensitive personal data were involved in this breach. This combination of information is particularly concerning because it includes both identity-verification details and financial and health-related data.
- Social Security Numbers
- Government ID Numbers
- Financial Account Codes
- Credit and Debit Account Information
- Health Records
When Social Security numbers and government ID numbers are exposed together, the risk of identity theft increases significantly. Criminals can use this combination to open new credit accounts, file fraudulent tax returns, or apply for loans in a victim’s name. Because this type of fraud can take months to detect, ongoing vigilance is essential.
In addition, the exposure of financial account codes and credit or debit account information raises the risk of direct financial fraud. Meanwhile, the inclusion of health records adds another layer of concern, since medical identity theft can lead to incorrect medical records or fraudulent insurance claims. As a result, affected individuals face a broader range of potential harm than from a single-category breach.
What is the company doing?
Chisholm, Persson & Ball, P.C. responded by filing a formal breach notification with the Vermont Attorney General. This step indicates the firm has acknowledged the incident and is working to meet its legal notification obligations. Filing with a state regulator typically also means affected individuals are being notified directly.
The firm also filed formal notification with the Vermont Attorney General. Beyond this filing, the public record does not currently detail additional remediation steps, such as whether credit monitoring or identity protection services are being offered. Individuals who believe they may be affected should watch for a direct notification letter, which may include further guidance or enrollment instructions.
What Should Affected Individuals Do?
Place a Fraud Alert or Credit Freeze
Because Social Security numbers and government ID numbers were involved, affected individuals should strongly consider placing a fraud alert or credit freeze with the three major credit bureaus. A credit freeze restricts access to your credit file, making it much harder for criminals to open new accounts in your name.
To set this up, contact Equifax, Experian, and TransUnion directly. A fraud alert is free and easier to manage, while a credit freeze offers stronger protection but requires temporary lifting when you apply for credit yourself. Either option adds a meaningful layer of defense against identity theft.
Monitor Your Credit Reports Regularly
In addition to freezing or flagging your credit, you should review your credit reports for unfamiliar activity. You can request free reports from each major bureau through AnnualCreditReport.com. Checking reports regularly helps you catch fraudulent accounts early.
If you notice unauthorized accounts or inquiries, report them immediately to the credit bureau and consider filing a report with the Federal Trade Commission. Early detection often limits the financial damage caused by identity theft.
Watch for Medical Identity Theft
Because health records were part of this breach, affected individuals should also monitor their medical billing statements and insurance explanations of benefits. Unfamiliar charges or services you didn’t receive could indicate someone else is using your medical identity.
If you spot suspicious activity, contact your healthcare provider and insurance company right away. This helps prevent incorrect information from becoming part of your permanent medical record, which can be difficult to correct later.
Stay Alert for Phishing Attempts
Following a data breach, scammers often use stolen information to craft convincing phishing emails, texts, or phone calls. Therefore, be cautious of unexpected messages asking you to verify personal details or click on links.
Never provide sensitive information in response to an unsolicited message. Instead, contact the organization directly using a verified phone number or website to confirm whether the request is legitimate.
Consider Consulting a Data Breach Attorney
Given the sensitive nature of the data involved, affected individuals may want to speak with a data breach attorney. An attorney can help evaluate whether you qualify for compensation through a potential class action or individual claim.
Many attorneys offer free case evaluations, so there’s little downside to asking questions. This step can also help you understand your legal rights and any applicable deadlines for taking action.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General