MisusePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIDENTITY_BASICHEALTH_BASICLowContained
Sunspire Health Florida, LLC
bd_abd6df4b6de035cc · schema v1 · pii pii-v1
Full breach record for Sunspire Health Florida, LLC →Sunspire Health Florida, LLC d/b/a White Sands Treatment Center notified patients of a data breach involving a former employee who stole a file containing patient names, contact info, and admission/discharge dates on April 1, 2025. The incident was discovered July 8, 2025. 3 Vermont residents were affected. The company implemented enhanced security protocols and revised policies.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-31-tampa-bay-treatment-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 31, 2025
- Raw hash
- 1e260c9ac448ddb7c481ab5c4453db840a16dc30ee1517b452700e53b2447058
Reporting entity
- Name
- Tampa Bay Treatment Associatesnorm: tampa bay treatment associates
Victim entity
- Name
- Sunspire Health Florida, LLCnorm: sunspire health florida
Incident
- Discovered
- Jul 8, 2025
- Materiality determined
- Dec 23, 2025
- Notification sent
- Dec 23, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 25 weeks(176 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.