Greenberg Traurig, LLP Data Breach Notice (Vermont Attorney General)

A Social Security number belonging to one of just 10 people has been exposed in a breach at Greenberg Traurig, LLP. Because this identifier cannot be changed or replaced, the exposure is permanent and carries lifelong risk of identity theft and tax fraud.

The Scale Is Small, the Risk Is Not

The Vermont Attorney General’s filing, dated September 08, 2026, states that Greenberg Traurig notified affected Vermont residents after social security numbers were exposed. The record names exactly 10 people. No other categories of information are listed in the filing.

That small headcount does not reduce the seriousness for those affected. A single Social Security number remains one of the most valuable pieces of data an identity thief can obtain. It does not expire, cannot be reissued on request, and is accepted by banks, credit issuers, and government agencies as primary proof of identity.

What This Exposure Actually Enables

With a Social Security number, criminals can file fraudulent tax returns, open new credit accounts, apply for government benefits, or create synthetic identities. These crimes can go undetected for years because the victim rarely learns about them until they file their own taxes or receive unexpected collection notices.

The filing does not disclose whether the exposed Social Security numbers belonged to clients, employees, or third parties. It also does not state how or when the data left Greenberg Traurig’s control. What matters to anyone named in the notice is that their permanent identifier is now outside the firm’s systems.

No Passwords or Credentials Were Exposed

The record contains no mention of passwords, login details, or any other credential. This is genuinely good news. You do not need to change any passwords because of this incident. The risk is confined to the non-revocable Social Security numbers themselves.

How to Determine Whether You Were Affected

Greenberg Traurig is required to notify affected individuals directly, usually by mail. If you have not received a letter, it is likely your information was not included. However, because the filing does not state when the incident occurred, anyone who has moved since they last did business with the firm should contact Greenberg Traurig directly to confirm whether their records were involved.

The Permanent Nature of a Social Security Number

Unlike a credit card or password, a Social Security number cannot be rotated or canceled and reissued at will. Once it is loose, the exposure cannot be undone. This is why the 10-person filing still matters: each of those ten individuals now faces a lifelong increase in identity-related risk that no password reset or simple fix can eliminate.

The filing lists Social Security numbers as the exposed category. No other data types appear. This narrow scope does not make the breach trivial; it simply means the damage is concentrated on one extremely sensitive, unchangeable identifier.

What You Can Still Control

While you cannot retract the number, you can limit what thieves are able to do with it. Placing a freeze on your credit reports prevents new accounts from being opened in your name. Monitoring your tax filings each year lets you catch fraudulent returns before they trigger penalties. These steps do not erase the exposure but they reduce its practical impact.

Because the number of people is so small, the organization had the ability to reach every affected person individually. The letter remains the clearest signal of whether your specific record was part of the incident.

Placing the Risk in Context

Ten people is a very small group by breach standards. Yet for each of those ten, the consequences are outsized precisely because Social Security numbers never expire. The filing gives no information about root cause, dwell time, or exfiltration method, and none of those details change the central fact: if you were one of the ten, your Social Security number is now in unknown hands and cannot be replaced.

Stay alert to unexpected tax documents, credit inquiries, or collection calls. Treat any communication that references your Social Security number with extra caution. The exposure is permanent, but the damage is not inevitable if you act deliberately on the identifiers that remain under your control.