







Green Mountain Higher Education Consortium (GMHEC), an organization serving and providing administrative services to three private Vermont colleges, experienced a data breach. On Nov. 19, 2024, GMHEC detected suspicious activity within its internal email environment. An investigation revealed that two employee email accounts were accessed by an unauthorized actor between Oct. 30, 2024 and Nov. 20, 2024.
A review was completed on July 25, 2025, and determined that personal information was accessed or acquired during the cybersecurity incident. Exposed information included names and Social Security numbers. This type of breach puts affected individuals at risk for identity theft and possible fraud.
Green Mountain Higher Education Consortium began notifying affected individuals by mail on Oct. 29, 2029. The educational organization provides services to Champlain College, Middlebury College and Saint Michael's college.
The data breach was also reported to the Maine Attorney General and the New Hampshire Attorney General on Oct. 28, 2025. According to the disclosures, at least 3,184 individuals were impacted by the cybersecurity incident.
Upon discovering the breach, GMHEC secured its email environment and engaged cyber incident response professionals to investigate. In addition to required state and federal disclosures, the organization is offering impacted individuals 12 free months of TransUnion Cyberscout single-bureau credit monitoring services.
If you receive a data breach notice from Green Mountain Higher Education Consortium, you may want to:
The organization also established an assistance line for individuals with questions at 1-833-844-9844, Monday through Friday, 8:00 a.m. – 8:00 p.m. EST.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)