LeMaitre Vascular Data Breach Exposes Social Security Numbers

LeMaitre Vascular Inc., a medical device company headquartered in Burlington, Massachusetts, has disclosed a data breach that may have affected the personal and medical information of consumers across multiple states. So far, 955 Massachusetts residents and 92 New Hampshire residents were impacted.

After discovering the network disruption, LeMaitre Vascular initiated an investigation with the assistance of independent cybersecurity experts. The investigation determined that certain files on the company's network may have been accessed and acquired without authorization.

LeMaitre Vascular then undertook a comprehensive review of the potentially affected files to determine what personal information they contained and which individuals were impacted.

On or about Sept. 14, 2026, following the completion of the review, LeMaitre Vascular confirmed that personal information belonging to certain consumers was contained within the potentially affected data.

The types of personally identifiable information and protected health information potentially exposed included names, Social Security numbers, USCIS Alien Registration numbers, financial account numbers, driver's licenses and medical records.

The breach was disclosed to the Vermont Attorney General on Sept. 18, 2026.

LeMaitre Vascular's response to the breach

The company is offering affected individuals complimentary identity protection services through Cyberscout, a TransUnion company.

To enroll, affected individuals can call 1-888-941-8669 or visit the Cyberscout enrollment page using the enrollment code included in their notification letter. The call center is available Monday through Friday from 8 a.m. to 8 p.m. EST, excluding major U.S. holidays.

The deadline to enroll is Dec. 18, 2026.