Health Care and Rehabilitation Services of Southeastern Vermont, Inc.

Health Care and Rehabilitation Services of Southeastern Vermont, Inc. (HCRS) reported unauthorized access to two email accounts between Dec 4-9, 2024. HCRS detected the incident on Dec 20, 2024. The breach exposed NH residents' PII including SSNs, driver's licenses, medical history, and health insurance info. HCRS engaged forensic investigators, reset passwords, and offered 12 months of credit monitoring to affected individuals.

Affected (this filing): 20

Health Care and Rehabilitation Services of Southeastern Vermont, Inc. (HCRS) disclosed that unauthorized access occurred to two email accounts between Dec 4-9, 2024. The incident was identified on Dec 20, 2024. The unauthorized party accessed emails and files containing full names and other personal information. HCRS reset passwords and engaged outside cybersecurity professionals. The organization is offering complimentary credit monitoring services to affected individuals.

Health Care and Rehabilitation Services of Southeastern Vermont, Inc. (HCRS) submitted a supplemental notification to the New Hampshire Attorney General regarding unauthorized access to two email accounts. The incident involved phishing leading to credential compromise, with unauthorized access occurring between December 4 and December 9, 2024. HCRS discovered the breach on December 20, 2024. Personal information of 70 New Hampshire residents, including names, SSNs, and driver's license numbers, was accessed. HCRS reset passwords, engaged forensic investigators, and offered credit monitoring to affected individuals.

Affected (this filing): 70