Green Mountain Higher Education Consortium Data Breach

Published
October 29, 2025
Updated
October 29, 2025
Green Mountain Higher Education Consortium Data Breach
Green Mountain College
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Green Mountain College

data breach?

Join the Lawsuit

It's free to join. 

Green Mountain Higher Education Consortium (GMHEC), an organization serving and providing administrative services to three private Vermont colleges, experienced a data breach. On Nov. 19, 2024, GMHEC detected suspicious activity within its internal email environment. An investigation revealed that two employee email accounts were accessed by an unauthorized actor between Oct. 30, 2024 and Nov. 20, 2024.

A review was completed on July 25, 2025, and determined that personal information was accessed or acquired during the cybersecurity incident. Exposed information included names and Social Security numbers. This type of breach puts affected individuals at risk for identity theft and possible fraud.

Green Mountain Higher Education Consortium began notifying affected individuals by mail on Oct. 29, 2029. The educational organization provides services to Champlain College, Middlebury College and Saint Michael's college.

The data breach was also reported to the Maine Attorney General and the New Hampshire Attorney General on Oct. 28, 2025. According to the disclosures, at least 3,184 individuals were impacted by the cybersecurity incident.

Green Mountain Higher Education Consortium's response

Upon discovering the breach, GMHEC secured its email environment and engaged cyber incident response professionals to investigate. In addition to required state and federal disclosures, the organization is offering impacted individuals 12 free months of TransUnion Cyberscout single-bureau credit monitoring services.

If you receive a data breach notice from Green Mountain Higher Education Consortium, you may want to:

  • Sign up for the free credit monitoring services, offered by the company.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

The organization also established an assistance line for individuals with questions at 1-833-844-9844, Monday through Friday, 8:00 a.m. – 8:00 p.m. EST.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image