Data Breach

Health Care and Rehabilitation Services of SE Vermont Data Breach Lawsuit Investigation

If you were affected by the Health Care and Rehabilitation Services of SE Vermont data breach, you may be entitled to compensation.
Updated on
Published on
Health Care and Rehabilitation Services of SE Vermont Data Breach Lawsuit Investigation
Health Care and Rehabilitation Services of SE Vermont Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Health Care and Rehabilitation Services of SE Vermont data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Health Care and Rehabilitation Services of SE Vermont

Health Care and Rehabilitation Services of Southeastern Vermont, known locally as HCRS, is a nonprofit community mental health agency established in 1967. The organization provides services to over 4,000 individuals each year across Windham and Windsor counties in Vermont.

What Happened?

In December 2024, HCRS discovered unauthorized access to two staff email accounts within its email environment. The incident took place between Dec. 4, 2024, and Dec. 9, 2024.

On May 13, 2025, HCRS determined that sensitive information for both clients and staff had been exposed.

Information Exposed:

  • First and last names
  • Dates of birth
  • Social Security numbers
  • Financial account numbers
  • Dates of treatment or service
  • Individual health insurance information
  • Medical history
  • Driver’s license numbers
  • Patient numbers
  • Medical record numbers (MRNs)
  • Healthcare billing information
  • Other medical treatment information

The types of information exposed varied by individual. HCRS has stated that, as of now, there is no evidence of financial fraud or identity theft related to the breach.

Your Rights and Next Steps

If you received a notification letter from HCRS, or believe your information may have been involved, there are important steps to consider.

First, monitor your financial accounts, medical statements, and credit reports for any signs of suspicious activity. Under federal law, everyone is entitled to one free credit report per year from each of the three major credit bureaus.

Consider placing a fraud alert on your credit file, which notifies creditors to contact you before opening new accounts. You may also want to place a security freeze on your credit report, which restricts access to your credit file and makes it harder for identity thieves to open accounts in your name.

If you notice any unauthorized activity, contact your local law enforcement and file a report. You can also reach out to the Federal Trade Commission for additional resources on identity theft.

You May Be Entitled to Compensation

If your information was exposed in the Health Care and Rehabilitation Services of SE Vermont data breach, you may have legal rights and could be eligible for financial compensation. Lawyers are ready to help individuals affected by this incident understand their options and pursue claims for damages.

To find out if you qualify and to join a lawsuit regarding this data breach, complete the below form. It only takes a few minutes to get started.

Sources

Submit Your Claim