OrthoConnecticut notified Vermont AG of a cybersecurity incident where unauthorized access occurred between Nov 24-28, 2023. The actor accessed and removed files containing patient names and medical information (PHI). Discovery was made on March 27, 2024. The company engaged forensic investigators, secured the network, and offered credit monitoring. No specific count of affected individuals was provided in the filing.