Gelinas & Ward Data Breach Investigation

Recently, Gelinas & Ward reported to the Attorney General of Vermont that the sensitive personal identifiable information in its care may have been compromised. According to the breach notice, on November 6, 2024, Gelinas & Ward became aware of suspicious activity within its network.¹ As a result, Gelinas & Ward launched an investigation to determine the nature of the incident.

Through its investigation, Gelinas & Ward confirmed that certain files and folders were copied from their network by an unauthorized third party on November 6, 2024. As a result, Gelinas & Ward began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. This review concluded on or about February 24, 2025. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Driver’s license number
• Date of birth
• Debit/Credit card information
• Account number

On June 26, 2025, Gelinas & Ward began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Vermont residents, Gelinas & Ward is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Gelinas & Ward filed with the Attorney General of Vermont is below.