🍁Vermont State AGFirst filing
Filed Mar 22, 2026bd_f8e9a72c245025ea
Health Management Systems of America (HMSA) reported a data breach to the Vermont Attorney General involving one Vermont resident. On December 9, 2024, HMSA detected unauthorized access to a single email account caused by a spear phishing campaign. The attacker accessed protected health information and Social Security numbers. HMSA secured the account, reset passwords, and engaged forensic investigators. Notification was sent to the affected individual in February 2026, offering 12 months of credit monitoring via Kroll.
Affected (this filing): 1
VT AG >45 bday