Schembre & Gannon Data Breach

Schembre & Gannon, LLC, an accounting firm, has reported a data security incident to the Vermont Attorney General’s Office. The filing indicates that at least 3 Vermont residents were affected, and that the exposed information may include Social Security numbers and financial account details. Firms that handle client financial and tax records have a responsibility to protect that sensitive information from unauthorized access.

Schembre & Gannon’s Data Breach Investigation

Schembre & Gannon reported this incident to the Vermont Attorney General’s Office on July 30, 2026, identifying 3 Vermont residents as affected by the incident at the time of filing. As is common with early-stage breach notifications, this number reflects the residents identified as of the filing date and may increase as the company’s investigation continues and additional affected individuals are identified.

The Vermont filing categorizes the compromised information as including Social Security numbers, financial account codes, and credit or debit account information. Vermont’s breach notification framework does not require companies to publicly post the underlying notification letter, so specific details about how the incident occurred, when it was first discovered, or what remediation steps the firm has offered to affected clients are not available in the public record at this time.

Accounting firms are frequent targets for unauthorized access because they routinely maintain concentrated repositories of clients’ most sensitive financial information, including Social Security numbers, bank account and routing numbers, and tax records, often for individuals and small businesses that rely on the firm to handle this information securely on their behalf. When Social Security numbers are exposed together with financial account information, the combination significantly raises the risk of both new-account identity theft and direct account takeover, since a bad actor may have enough information to access an existing account, not merely open a new one in the victim’s name.

Because accounting relationships are typically ongoing and involve annual exchanges of highly sensitive tax and financial documents, clients of a firm affected by an incident like this one should treat any communication from Schembre & Gannon about the incident carefully, verify its authenticity through a known phone number rather than clicking any links in an email, and remain alert to phishing attempts that may reference real account details obtained through the breach.

When Did This Breach Occur?

Schembre & Gannon reported this incident to the Vermont Attorney General’s Office on July 30, 2026. The company has not publicly disclosed the specific date the underlying incident occurred or was discovered.

What Information Was Breached?

According to the Vermont AG filing, the categories of information involved include Social Security numbers, financial account codes, and credit or debit account information for at least 3 affected Vermont residents.

What You Can Do

If you are a client of Schembre & Gannon, consider taking the following steps to protect yourself:

• Contact Schembre & Gannon directly to confirm whether your information was involved and ask what protective services, if any, are being offered
• Regularly review your bank and credit card statements for unauthorized transactions
• Consider placing a fraud alert or security freeze with Equifax, Experian, and TransUnion
• Obtain a free copy of your credit report at annualcreditreport.com and review it for unfamiliar accounts
• Report any signs of identity theft to your state Attorney General, local law enforcement, or the Federal Trade Commission

File a Data Breach Lawsuit Against Schembre & Gannon

If your personal information was exposed as a result of this incident involving Schembre & Gannon, you may have legal options available to you. Accounting firms that handle sensitive financial and tax information are expected to maintain reasonable safeguards against unauthorized access.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.