Directed Trust Company notified the Vermont Attorney General that unauthorized access exposed clients’ Social Security numbers, government ID numbers, and financial account information. The number of people affected has not been publicly disclosed. Anyone who receives a notification letter should place a credit freeze or fraud alert immediately and monitor their financial accounts closely for signs of misuse.
| Company | Directed Trust Company |
|---|---|
| Industry | Finance |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Directed Trust Company Data Breach?
Directed Trust Company recently filed a formal data breach notification with the Vermont Attorney General’s office. The filing confirms that unauthorized individuals gained access to sensitive personal and financial information tied to the company’s clients. This Directed Trust Company data breach notification is now part of the public record in Vermont.
The exact discovery date has not been publicly disclosed. However, the company’s notification to Vermont regulators was filed in October 2026, which means affected individuals are only now learning the details. Because the filing does not specify the method of attack, it remains unclear whether the breach stemmed from a hacking incident, an insider issue, or another cause.
As a result of the filing, Directed Trust Company has acknowledged that an investigation took place before notification letters went out. In addition, the company appears to have worked with forensic or legal specialists to determine which data categories were involved. This step is standard practice when a financial services firm confirms that client records were accessed without authorization.
Who was affected?
The breach likely affects clients of Directed Trust Company who had personal and financial information stored in the firm’s systems. Because the company provides trust and custodial services, the people affected are most likely account holders or beneficiaries whose data was maintained for financial administration purposes.
The total number of affected individuals has not been publicly disclosed. Therefore, it is not yet clear whether this incident affects a small group of clients or a much larger population. Additionally, the notification does not indicate whether minors or dependents connected to trust accounts might be included among those affected.
What Information Was Potentially Exposed?
According to the breach notification, several categories of sensitive data were confirmed as part of this incident. These details matter because they shape the specific risks affected individuals may now face.
- Social Security Numbers
- Government ID Numbers
- Financial Account Codes
- Credit and Debit Account Information
This combination of data creates meaningful identity theft risk. For example, Social Security numbers paired with government ID numbers can allow criminals to open new credit accounts, file fraudulent tax returns, or impersonate victims in other financial transactions.
In addition, the exposure of financial account codes along with credit and debit account information raises the risk of direct financial fraud. As a result, affected individuals should watch closely for unauthorized charges, unfamiliar account activity, or unexpected credit inquiries in the months ahead.
What is the company doing?
Directed Trust Company responded to the incident by filing an official notification with the Vermont Attorney General’s office. This step is a legal requirement in many states once a company confirms that residents’ personal information has been exposed. The company also filed formal notification with the Vermont Attorney General.
Beyond the regulatory filing, the specific remediation steps taken by the company have not been detailed in the available notification. However, companies in this situation typically work to secure affected systems, review access controls, and determine whether additional safeguards are needed going forward.
It is not yet clear whether Directed Trust Company is offering credit monitoring or identity protection services to affected individuals. Anyone who receives a notification letter should review it carefully, since it may include specific instructions or enrollment details relevant to their situation.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Affected individuals should request copies of their credit reports from all three major credit bureaus. Reviewing these reports regularly can help you catch new accounts or inquiries you did not authorize.
Because Social Security numbers were involved in this breach, ongoing monitoring is especially important. Identity thieves sometimes wait months or even years before using stolen information, so a single check is not enough.
Consider a Credit Freeze or Fraud Alert
Given that Social Security numbers and government ID numbers were exposed, placing a credit freeze is one of the strongest protective steps available. A freeze prevents new creditors from accessing your credit file, which makes it much harder for criminals to open accounts in your name.
Alternatively, a fraud alert requires lenders to take extra verification steps before approving credit in your name. This option is less restrictive than a freeze but still offers meaningful protection while you monitor the situation.
Watch for Phishing and Scam Attempts
Criminals often use stolen personal information to craft convincing phishing emails or phone calls. Therefore, affected individuals should be cautious of unexpected messages claiming to be from banks, government agencies, or Directed Trust Company itself.
Never click on links or share personal details in response to unsolicited communications. Instead, contact the organization directly using a verified phone number or website to confirm whether the request is legitimate.
Protect Your Financial Accounts
Because credit and debit account information was part of this breach, affected individuals should review their bank and card statements frequently. Look for small, unfamiliar transactions, since fraudsters sometimes test stolen account numbers with minor charges first.
If you notice anything suspicious, contact your financial institution immediately to dispute the charge and request a new card number. Acting quickly can limit your financial exposure and simplify the dispute process.
Consult a Data Breach Attorney
Given the sensitivity of the data involved, affected individuals may want to speak with an attorney who focuses on data breach cases. A free case evaluation can help clarify whether you qualify for compensation related to this incident.
An attorney can also help you understand your rights under Vermont law and other applicable consumer protection statutes. This guidance can be especially useful if you experience financial harm connected to this breach in the future.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General