Date of Breach: October 21, 2026 (claimed by a ransomware group, unconfirmed)
Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.
Were you recently affected by a data breach?
Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.
Social Security numbers, financial account codes, and credit or debit account information (categories listed in the Vermont Attorney General’s register).
Not yet determined. A ransomware group has listed the agency on its leak site, but the agency has not confirmed a breach or what data is involved.
According to OFX: names and usernames, contact information (address, email and phone number), dates of birth, occupation, answers to secret questions, information about select transfers and recipients, communications with OFX, IP addresses and device information, and social media URLs. OFX says copies of identity documents were not accessed.
Names, addresses, Social Security numbers, financial information, patient ID numbers and limited health-related data. Not every affected person had every type of information exposed.
Not yet confirmed. A ransomware group claims to hold patient and employee files, but the practice has not confirmed a breach or what data is involved.
Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.
Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.
Social Security numbers, government ID numbers, financial account codes, and credit or debit account information.