This document is a data breach notification from Hightower Holdings LLC, made public by the Vermont Attorney General's Office on March 23, 2026. It serves to inform consumers that their personal information may have been compromised due to a data security incident. The notice itself does not impose new regulatory requirements but fulfills the company's obligation to notify affected individuals as per state breach notification laws.

Compliance officers should note that while this specific document is a notification and not an enforcement action, it highlights the ongoing risks and regulatory scrutiny surrounding data breaches. Companies experiencing such incidents must ensure they comply with all applicable state data breach notification laws, which often include specific timelines, content requirements for notices, and potential penalties for non-compliance. Reviewing internal incident response plans and data security measures is crucial to prevent and effectively manage future breaches.