.png)
Health Care and Rehabilitation Services of Southeastern Vermont Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Health Care and Rehabilitation Services of Southeastern Vermont, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Health Care and Rehabilitation Services of Southeastern Vermont, Inc.
Health Care and Rehabilitation Services of Southeastern Vermont, Inc. (HCRS) is a private non-profit that provides behavioral health and rehabilitative services to individuals and families in southeastern Vermont. The agency is designated by the State of Vermont as a community mental health provider, serving Windham and Windsor counties since 1967.
HCRS offers a range of services, including outpatient mental health and substance use treatment, support for co-occurring disorders, developmental services, and crisis support with nearly 200 employees.
What Happened?
In December 2024, HCRS discovered that an unauthorized individual gained access to two staff email accounts. The breach occurred between approximately December 4, 2024, and December 9, 2024. After detecting the incident on December 20, 2024, HCRS took immediate steps to secure its systems and launched an investigation with the help of third-party cybersecurity experts.
On May 13, 2025, it was determined that the compromised email accounts contained sensitive information belonging to clients and staff.
Information Exposed:
- First and last names
- Dates of birth
- Social Security numbers
- Financial account numbers
- Dates of treatment or service
- Individual health insurance information
- Medical history
- Driver’s license numbers
- Patient numbers
- Medical record numbers (MRNs)
- Healthcare billing information
- Other medical treatment information
Your Rights and Next Steps
If you received a notification letter from HCRS, or if you believe your information may have been involved, there are important steps you can take to protect yourself.
First, monitor your financial accounts and health insurance statements for any suspicious activity. You are entitled to one free credit report annually from each of the three major credit bureaus: Equifax, Experian, and TransUnion.
You can also place a fraud alert or a security freeze on your credit file at no cost. A fraud alert notifies creditors to verify your identity before opening new accounts, while a security freeze restricts access to your credit report entirely. Contact the credit bureaus directly to set these up.
If you notice any signs of identity theft, such as unfamiliar accounts or medical services, report it to law enforcement and your state Attorney General.
For questions about the breach or to confirm if your information was affected, you can reach out to HCRS at rnevins@hcrs.org. HCRS is also setting up a dedicated toll-free response line for additional support.
You May Be Entitled to Compensation
If your personal information was exposed in the Health Care and Rehabilitation Services of Southeastern Vermont, Inc. data breach, you may be eligible for compensation. Lawyers are ready to help you understand your rights and pursue a claim for damages resulting from this incident.
To find out if you qualify and to take the next step in joining a class action lawsuit, complete the form below.
.svg)