Date of Breach: Unauthorized access August 10, 2026 to August 12, 2026
Protected health information (name and other health data; specific categories not disclosed). Social Security numbers were not involved.
Were you recently affected by a data breach?
Protected health information (name and other health data; specific categories not disclosed). Social Security numbers were not involved.
Name with Social Security number, driver’s license number, financial account information, date of birth, medical information, or health insurance information (varies by individual)
Financial account codes, credit and debit account information
Certain patient records (specific categories of information not yet disclosed by the company).
Financial account codes and credit or debit account information (categories listed in the Vermont Attorney General’s register).
Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.
Social Security numbers, financial account codes, and credit or debit account information (categories listed in the Vermont Attorney General’s register).
Not yet determined. A ransomware group has listed the agency on its leak site, but the agency has not confirmed a breach or what data is involved.
According to OFX: names and usernames, contact information (address, email and phone number), dates of birth, occupation, answers to secret questions, information about select transfers and recipients, communications with OFX, IP addresses and device information, and social media URLs. OFX says copies of identity documents were not accessed.