Date of Breach: Reported to the Vermont Attorney General on October 22, 2026 (incident dates not yet publicly disclosed)
Financial account codes, credit and debit account information
Were you recently affected by a data breach?
Were you recently affected by a data breach?
Financial account codes, credit and debit account information
Certain patient records (specific categories of information not yet disclosed by the company).
Financial account codes and credit or debit account information (categories listed in the Vermont Attorney General’s register).
Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.
Social Security numbers, financial account codes, and credit or debit account information (categories listed in the Vermont Attorney General’s register).
Not yet determined. A ransomware group has listed the agency on its leak site, but the agency has not confirmed a breach or what data is involved.
According to OFX: names and usernames, contact information (address, email and phone number), dates of birth, occupation, answers to secret questions, information about select transfers and recipients, communications with OFX, IP addresses and device information, and social media URLs. OFX says copies of identity documents were not accessed.
Names, addresses, Social Security numbers, financial information, patient ID numbers and limited health-related data. Not every affected person had every type of information exposed.
Not yet confirmed. A ransomware group claims to hold patient and employee files, but the practice has not confirmed a breach or what data is involved.