HarbisonWalker International, Inc. Data Breach Notice (Vermont Attorney General)

A Social Security number belonging to one of just two Vermont residents has been exposed in a data breach involving HarbisonWalker International, Inc. Because a Social Security number cannot be changed or reissued, this exposure creates a permanent risk of identity theft and tax fraud that will last for years.

The filing, submitted to the Vermont Attorney General on September 22, 2026, states that the company is notifying affected individuals. The record lists Social Security numbers as the category of information exposed. No other data categories appear in the filing.

Why a Social Security Number Exposure Matters Permanently

Unlike a credit card or password, a Social Security number has no expiration date and cannot be replaced at will. Once it is out of the organisation’s control, it remains a usable identifier for someone else to open accounts, file fraudulent tax returns, or claim government benefits in your name. The small number of people affected — exactly two — does not reduce the seriousness of the exposure for those individuals.

What the Record Does Not Tell You

The filing does not disclose how the Social Security numbers were accessed, whether the data was encrypted, or when the incident occurred. It also contains no information about passwords or login credentials. No passwords were exposed.

How to Determine If You Are One of the Two Affected Customers

HarbisonWalker International, Inc. is required to notify the affected individuals directly, usually by mail. If you receive a letter from the company, follow the instructions it contains. Absence of a letter usually means your information was not included in this filing. Because the record does not state when the incident took place, there is no reliable way to use a move date as a test. Anyone who believes they may have been affected should contact the company directly to confirm.

What You Can Still Control

While you cannot change your Social Security number, you retain several practical ways to limit what thieves can do with it.

• Place a fraud alert or credit freeze. Contact Equifax, Experian, and TransUnion to add an alert or lock your credit files. This stops most new-account fraud even if someone has your number.
• Monitor your tax filings closely. Check IRS account transcripts online every few months and file your taxes as early as possible so a fraudster cannot file first.
• Review annual credit reports. Order free reports from AnnualCreditReport.com and watch for accounts or inquiries you do not recognize.
• Consider identity theft protection services. Many banks and insurers now offer recovery assistance that can help resolve disputes if fraudulent activity appears.

The exposure is limited to two people, but for those affected the consequences are lasting. The letter from HarbisonWalker International remains the clearest confirmation of whether your records were involved.