Orrstown Bank Data Breach Notice (Vermont Attorney General)

The filing from Orrstown Bank, submitted to the Vermont Attorney General on June 12, 2026, states that the personal information of 11 people was exposed. The categories listed are Social Security Numbers, Government ID Numbers, Financial Account Codes, and Credit and Debit Account Info. No passwords were exposed.

Your Social Security Number cannot be replaced

If you are one of the 11 people named in this filing, your Social Security Number is now in the hands of unknown parties and cannot be changed like a password or a credit card. The same is true for any Government ID Numbers included. These identifiers stay with you for life, which is why they remain valuable for identity theft long after the initial breach.

The financial account codes and credit and debit account information listed can be used to attempt fraudulent transactions or to open new accounts in your name. While those specific accounts can usually be frozen or reissued, the presence of the Social Security Number alongside them creates a more durable risk. A thief who has both can more easily pass identity verification checks that many banks and lenders rely on.

What the 11-person filing actually tells you

This is a small breach by most standards, yet the categories involved matter far more than the headcount. A single Social Security Number paired with financial account details is enough for serious fraud. The record does not disclose how the information was accessed, whether the exposure was brief or extended, or the root cause. Those details remain unknown.