G.I. Medicine Associates, P.C. data breach

Clerk's notes

G.I. Medicine Associates, P.C., a specialized medical practice operating in Vermont, reported a data security incident to the state's Attorney General on September 18, 2026. The full scope and nature of this breach are presently being monitored, and the specific mechanism of the security failure has not been publicly detailed at this time. This disclosure means that patient information entrusted to the practice may have been accessed by unauthorized parties.

The reported exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The compromise of such comprehensive medical records carries significant risks beyond typical identity theft. Affected individuals face potential medical identity theft, where their information could be used for fraudulent billing, obtaining prescriptions, or interfering with their genuine medical history.

As a healthcare provider, G.I. Medicine Associates, P.C. is legally mandated to safeguard patient data under federal statutes like HIPAA, as well as Vermont's own data protection laws. These regulations require robust security measures to prevent unauthorized access to sensitive health information. The occurrence of a data breach suggests that these mandated protections may have been insufficient or improperly applied, allowing a security lapse that exposed patient records.

Receiving a data breach notification letter from G.I. Medicine Associates, P.C. is a critical development for affected individuals. This official communication serves as an acknowledgment that your confidential information was compromised due to a security incident. Such a notification may establish your legal standing to pursue a class action claim, seeking compensation for related expenses, time spent mitigating risks, and the inherent compromise of your personal security. Our firm evaluates these situations on a contingency fee basis, meaning there are no upfront costs to you.

If a notification letter about this breach reached you, see every Vermont data breach on file or browse all cases.