MisuseHealthcareHealthcarePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Health (basic)LowContained

Sunspire Health Florida, LLC

bd_abd6df4b6de035cc · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 8, 2025

Filed

Dec 31, 2025

To disclose

25 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Sunspire Health Florida, LLC →

Sunspire Health Florida, LLC d/b/a White Sands Treatment Center notified patients of a data breach involving a former employee who stole a file containing patient names, contact info, and admission/discharge dates on April 1, 2025. The incident was discovered July 8, 2025. 3 Vermont residents were affected. The company implemented enhanced security protocols and revised policies.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 98 days

discovery → filing · 25 weeks / 176 days

Apr 1, 2025

Begins

Jul 8, 2025

Discovered

Dec 23, 2025

Scope determined

Dec 31, 2025

Filed

vs. sector median

+16 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Tampa Bay Treatment Associates
norm: tampa bay treatment associates

Name: Sunspire Health Florida, LLC
norm: sunspire health florida
Domain: sunspirehealth.com
Also named: Sunspire Health Florida, LLCdba oflegal entity
White Sands Treatment Centerdba oftrade name
Industry: Healthcarellm

Discovered: Jul 8, 2025
Breach occurred: Apr 1, 2025
Undetected for: 98 daysoccurrence → discovery
Materiality determined: Dec 23, 2025
Notification sent: Dec 23, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Filed notice with Vermont Attorney General
Initial access: insider_action

During the incident: Conducted an investigation into the incident
Implemented enhanced security protocols and safeguards
Revised policies
Provided internal trainings
Changes made: Implemented enhanced security protocols and safeguards
Revised policies
Provided internal trainings
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-12-31-tampa-bay-treatment-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 31, 2025
Raw hash: 1e260c9ac448ddb7c481ab5c4453db840a16dc30ee1517b452700e53b2447058

Reporting entityTampa Bay Treatment Associates

Victim entitySunspire Health Florida, LLC

Incidentdiscovered Jul 8, 2025

Stated responseConducted an investigation into the incident

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov