Bath Fitter Distributing, Inc. experienced a ransomware/data security incident in July 2026, which they began investigating after detecting unauthorized access to their system. The company started notifying affected individuals on July 16, 2026.
The breach may have exposed Social Security numbers, government identification numbers, financial account codes, and credit/debit account information. Other potentially compromised data types include dates of birth, health and safety information, direct pay authorizations, compensation data, resumes/applications, background check information, passport/driver's license numbers, and disciplinary records. At least 44 Vermont residents were affected, and residents in Massachusetts may also have been impacted. The nationwide total number of affected individuals has not been publicly confirmed.
While details continue to emerge, Bath Fitter has confirmed the unauthorized access and is investigating the full extent of the incident. Regulatory filings have been made in Vermont and Massachusetts.