John Tyler Alcohol Safety Action Program Data Breach Notice (Vermont Attorney General)

The John Tyler Alcohol Safety Action Program has notified Vermont authorities that the Social Security numbers and government ID numbers of two people were exposed in a data breach. The filing, reported to the Vermont Attorney General on November 12, 2026, lists only these two categories of information.

A Social Security Number Cannot Be Replaced

If your records were among those affected, the core problem is that a Social Security number and government ID details do not expire and cannot be changed at will. Unlike a credit card or password, these identifiers stay with you for life. Once they are out of the organisation’s control, they can be used to open accounts, file fraudulent tax returns, or commit identity theft that is difficult to fully resolve.

The record does not state when the incident occurred, so the only reliable way to know whether you are one of the two people affected is to wait for direct notification from the organisation. It is required to contact affected individuals, usually by post. If you have not received a letter, it is likely your information was not included. However, if you have moved since the incident, you should contact John Tyler Alcohol Safety Action Program directly to confirm your status.

What This Exposure Enables

With a Social Security number and government ID, someone can more easily impersonate you to government agencies, financial institutions, or employers. These two pieces of information together are often enough to bypass basic identity checks that would otherwise stop fraud. No passwords or login credentials were exposed, which removes one common source of immediate account takeover risk.

Because only two people are named in the filing, this is an unusually small incident. The small number does not change the lifelong risk attached to the specific data that was exposed.

Why the Letter Is the Only Certain Check

The filing provides no discovery date and no separate incident date, so there is no way to calculate how long the information may have been accessible. The Vermont notification simply records what categories were involved and how many Vermont residents were affected. Everything else remains undisclosed.

Absence of a letter is usually a positive sign in incidents of this size, but last-known-address problems mean it is not absolute proof. Anyone who interacted with the John Tyler Alcohol Safety Action Program and has changed addresses should reach out to the organisation for verification.

Practical Steps That Address This Specific Risk

• Place a fraud alert or credit freeze with the three major credit bureaus immediately. This stops new accounts from being opened in your name using the exposed identifiers.
• Monitor your tax filings closely this season and set up IRS account alerts. Fraudulent tax returns filed with a stolen Social Security number are one of the most common consequences.
• Review every Explanation of Benefits and government correspondence for unfamiliar activity. Government ID numbers can be used to divert benefits or create fake claims.
• Keep records of the notification letter and all follow-up contacts. Documentation helps if you later need to dispute fraudulent activity tied to these identifiers.