The Vermont Attorney General posted a consumer data breach notice for TIMEC Oil & Gas, Inc. dated April 2, 2026. A California Attorney General filing states that an unauthorized party accessed TIMEC’s enterprise resource planning software between April 7 and April 10, 2025. The filing says TIMEC reported the incident to California on July 30, 2025, and began mailing notification letters to affected individuals that day.
The information potentially involved varied by individual and included names, Social Security numbers, dates of birth, financial account information, and protected health information. The entity-level number of affected individuals was not identified in the sources reviewed. The available sources do not establish a regulator notification date for Vermont or confirm the full list of affected states. Further details may emerge as additional notices become available.