Gap International, Inc. notified Vermont consumers of a data security incident discovered on July 22, 2025. Unauthorized access to certain files containing names, SSNs, driver's licenses, and medical/health insurance information was confirmed on October 29, 2025. No evidence of misuse was found. The company engaged cybersecurity experts, enhanced security measures, and provided credit monitoring and fraud assistance via Cyberscout/Identity Force.