On May 19, the Vermont attorney general settled claims against a hotel chain for failing to notify Vermont residents of a security breach until six months after the breach occurred. On May 21, the Vermont attorney general announced that it settled claims against a university related to a security breach that took place in November 2013 where the university did not notify affected Vermont residents until approximately four months after the vulnerability was discovered.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.