Date of Breach: Reported August 2026 (Dire Wolf ransomware claim)
Names, contact information, medical and health information, donor and recipient matching records
Were you recently affected by a data breach?
Names, contact information, medical and health information, donor and recipient matching records
Social Security numbers, government ID numbers, health records
Social Security numbers, health records
Social Security numbers, government ID numbers, financial account codes, credit and debit account information, health records
Not yet publicly disclosed by the company
Names, protected health information (specific additional data types not publicly disclosed)
Names of individuals and Social Security numbers
Social Security numbers and health records, according to University Surgical Associates, PLLC’s notice to the Vermont Attorney General. The company has not publicly disclosed the specific cause of the incident or additional details about how the data was compromised.
Social Security numbers and financial account information, according to Punch & Associates Investment Management’s notice to the Vermont Attorney General. A ransomware group that claimed responsibility for the incident stated that additional records, including passport numbers, driver’s license numbers, employee personal files, and financial and business documents, were also taken, though the company has not publicly confirmed the full scope of exposed data.