Superb Shifts, Inc., a healthcare staffing platform that connects nursing professionals with healthcare facilities, has reported a data breach to the Vermont Attorney General’s Office. The filing, submitted on July 31, 2026, disclosed that certain personal information may have been exposed. Companies that operate staffing and workforce platforms handle sensitive identifying information for the individuals who use their services, and any breach of that data creates real risk for those affected.
Superb Shifts, Inc.’s Data Breach Investigation
According to the notice filed with the Vermont Attorney General, Superb Shifts reported that 2 Vermont residents were affected by the incident. Superb Shifts operates as a technology platform matching healthcare facilities with contract nursing staff, including CNAs, LPNs, and RNs, which means the company likely collects and stores identifying and credentialing information from healthcare workers using its service. Beyond the state filing, the company has not publicly disclosed how the breach occurred, when it was first discovered, or the underlying cause of the incident.
Staffing and workforce-matching platforms, particularly in the healthcare sector, have become attractive targets for cybercriminals because they often store large volumes of sensitive worker identification and credentialing data in centralized systems. These platforms frequently need to verify licenses, background checks, and government-issued identification as part of onboarding contract workers, meaning the databases they maintain can be rich with exactly the kind of information fraudsters seek. A breach at a smaller, growing technology company can sometimes go undetected for longer periods than at larger, more heavily monitored organizations, which can increase the window during which exposed data is vulnerable to misuse.
Social Security numbers and government-issued identification numbers are among the most sensitive types of personal information that can be exposed in a data breach because they enable a wide range of identity theft, including fraudulent loan applications, unauthorized tax filings, and the creation of fake identification documents. Unlike financial account numbers, which institutions can quickly cancel and reissue, a stolen Social Security number or government ID number represents a long-term vulnerability, since these identifiers are not easily changed and can continue to be exploited by criminals years after a breach occurs.
Vermont law requires companies to report data breaches affecting the personal information of state residents, and Superb Shifts’ filing reflects compliance with this legal obligation. While the number of Vermont residents affected in this particular filing is relatively small, breach notifications like this one are sometimes just one piece of a larger multi-state disclosure, since companies operating nationally are often required to separately notify residents and regulators in each state where affected individuals reside. Affected individuals should watch for a formal notification letter directly from Superb Shifts with further details.
When Did This Breach Occur?
Superb Shifts’ breach notification was reported to the Vermont Attorney General’s Office on July 31, 2026. The company has not publicly disclosed the specific date the underlying security incident occurred or when it was first detected internally.
What Information Was Breached?
According to the Vermont AG filing, the categories of information involved in this breach include Social Security numbers and government-issued ID numbers. Superb Shifts has not publicly specified any additional detail about the scope of the exposed data.
What You Can Do
If you believe you may have been affected by the Superb Shifts data breach, there are several steps you can take to help protect yourself:
- Watch for an official notification letter from Superb Shifts and review it carefully for any protective services offered.
- Consider placing a fraud alert or credit freeze with the three major credit bureaus.
- Regularly monitor your credit reports and financial accounts for unfamiliar activity.
- Be cautious of unsolicited calls, texts, or emails referencing this breach, as scammers often use breach news to launch phishing attempts.
- Report any signs of identity theft to the Federal Trade Commission at IdentityTheft.gov.
File a Data Breach Lawsuit Against Superb Shifts, Inc.
Companies that collect sensitive identifying information from the individuals who use their platforms have a legal and ethical obligation to protect that data from unauthorized access. When a breach like this occurs, affected individuals may have legal options available to them, including the possibility of joining or filing a class action lawsuit to seek compensation for the harm caused.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
