A ransomware attack last fall exposed the Social Security numbers and financial data of 1,757 Vermont residents who stayed at or worked for the Vergennes resort.

by Compass Vermont

The Vergennes resort, Basin Harbor, was hit by a ransomware attack on October 20, 2025. Hackers accessed the resort’s computer systems and walked away with some of the most sensitive personal data a company can hold: Social Security numbers, government identification numbers, financial account information, and credit and debit card data.

According to the Vermont Attorney General’s Office, 1,757 Vermont residents were affected. The total number of people notified nationwide is 3,150.

Notifications to affected individuals went out April 20, 2026.

The attack was carried out by a criminal group known as Akira, which publicly claimed responsibility in November 2025. Akira typically steals data before threatening to publish it — a tactic designed to pressure victims into paying. It is not publicly known whether Basin Harbor paid a ransom or whether the stolen data has been released.

If you think you may be affected, here’s what to do right now:

Place a credit freeze with all three major bureaus — Equifax, Experian, and TransUnion. It’s free, it takes about ten minutes per bureau, and it prevents anyone from opening new accounts in your name without your knowledge. A freeze does not affect your existing accounts or your credit score. You can lift it temporarily any time you need to apply for credit.

You can also request a free credit report at AnnualCreditReport.com to check for any accounts or activity you don’t recognize.

If you received a written notice from Basin Harbor in the past two weeks, a California law firm — Cole & Van Note — has already opened an investigation and is pursuing legal action on behalf of affected individuals.

Basin Harbor Resort is listed in the Vermont Attorney General’s public data breach registry, which tracks every company required to report a breach affecting Vermont residents. The registry is available at ago.vermont.gov. Compass Vermont will continue following this story.