Tri-Cities Gastroenterology data breach
Tri-Cities Gastroenterology in Vermont reported a patient data security incident on April 29, 2026. This breach exposed sensitive health and personal identifiers, including Full Name, Date of Birth, Social Security Number, Medical Record Number, and various treatment details. Affected individuals face long-term risks such as medical identity theft and financial fraud.
Docket sheet
- Company
- Tri-Cities Gastroenterology
- Venue
- Vermont Attorney General
- Filed
- April 29, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Vermont Attorney GeneralApril 29, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
Tri-Cities Gastroenterology, a medical practice based in Vermont, filed a notice with regulators on April 29, 2026, concerning a reported data security incident. The investigation into this breach is currently listed as monitoring. Patients of Tri-Cities Gastroenterology may have received notification letters indicating that their personal health information was compromised in this event.
The compromised information includes highly sensitive patient data such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of this combination of data categories presents significant concerns for those affected.
Unlike a compromised credit card which can be easily canceled, the types of data exposed in this breach—especially Social Security Numbers and medical records—cannot be changed. This puts affected individuals at risk for medical identity theft, where unauthorized parties might seek medical care using their identity, and potentially for financial fraud or targeted phishing scams designed to exploit their private health details.
As a healthcare provider, Tri-Cities Gastroenterology is legally bound by federal HIPAA regulations and state laws to safeguard patient data. The occurrence of such a breach often raises questions about the adequacy of security measures in place to protect this sensitive information from foreseeable cyber threats.
If you have received a data breach notification letter from Tri-Cities Gastroenterology, your confidential information was confirmed to be exposed. Understanding your rights and potential recourse is important. We are currently reviewing this case, and we encourage affected individuals to seek a free case review to determine if their specific situation warrants further action.
If a notification letter about this breach reached you, see every Vermont data breach on file or browse all cases.
Other Vermont docket entries
- Nephrology AssociatesVermont AGNovember 6, 2026Monitoring
- IronBridge Wealth Counsel, LLCVermont AGNovember 6, 2026Monitoring
- Insight Credit UnionVermont AGNovember 6, 2026Monitoring
- Family Implant and DentistryVermont AGNovember 6, 2026Monitoring
- Amplifon (USA), Inc.Vermont AGNovember 5, 2026Monitoring
- UFP technologies,Vermont AGNovember 5, 2026Monitoring
- Xplicit Audio LLCVermont AGNovember 5, 2026Monitoring
- Killingly Public Schools (KPS)Vermont AGNovember 5, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.