HackingHealthcareHealthcareStolen CredentialsTargetedIdentity (basic)Government IDEmploymentMediumContained

Med Atlantic, Inc.

bd_e635652a3bdd7f19 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 10, 2025

Filed

Jan 9, 2026

To disclose

9 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Med Atlantic, Inc. →2 incidents on file

Med Atlantic, Inc. reported a network compromise discovered on November 10, 2025, which may have exposed personal information processed by human resources, including names, dates of birth, Social Security numbers, and employment data. The incident was contained, law enforcement was notified, and affected individuals were offered 12 months of complimentary identity monitoring through Epiq.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 9 weeks / 60 days

Nov 10, 2025

Discovered

Jan 9, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_5459d9b7b907f0f82026-01-07 · +2dVerified
New Hampshire State AGbd_d25b79098fa1d14d2026-01-07 · +2dVerified
Indiana State AGbd_0676fdbedda4dede2025-12-26 · +14dCandidate

Name: Med Atlantic, Inc.
norm: med atlantic

Name: Med Atlantic, Inc.
norm: med atlantic
Industry: Healthcarellm

Discovered: Nov 10, 2025
Materiality determined: —
Notification sent: Dec 26, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Stopped the compromise
Secured this data
Brought in third-party experts to investigate
Notified law enforcement
Secured the services of Epiq - Privacy Solutions ID to provide complimentary identity monitoring
Changes made: Improving data protection through additional awareness training
Updating procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGDec 26 · first

Massachusetts State AG+12d

New Hampshire State AG+12d

Vermont State AG+14d · this page

Pattern: first filing Dec 26 (IN), last Jan 9 (VT) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-01-09-med-atlantic-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2026
Raw hash: cbd3b088244c69d74329c236ff3cc6125c21feae49314217c0ea17e59cedb4a0

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMed Atlantic, Inc.

Victim entityMed Atlantic, Inc.

Incidentdiscovered Nov 10, 2025

Stated responseStopped the compromise

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov