Health Care and Rehabilitation Services of Southeastern Vermont Data Breach
Last Updated on August 8, 2025
At A Glance
- What's Going On?
- Attorneys need to hear from people affected by the HCRS data breach as they investigate whether a class action lawsuit can be filed.
- What You Can Do
- If you got a letter or email about the data breach, fill out the form on this page to learn more about the investigation and how you can help.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the breach.
HCRS Data Breach: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the HCRS data breach.
As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.
HCRS Security Incident: What Happened?
Health Care and Rehabilitation Services of Southeastern Vermont (HCRS) recently announced a data breach discovered in December 2024 when the organization detected suspicious activity in its email environment. The Vermont-based mental health and developmental services agency, which serves individuals and families across Windsor and Windham counties, experienced unauthorized access to two employee email accounts between December 4 and December 9, 2024. Following a forensic investigation completed in May 2025, HCRS confirmed that sensitive personal and health information belonging to clients and staff may have been compromised.
Information potentially exposed in the Health Care and Rehabilitation Services of Southeastern Vermont data breach varied by individual but may include names, dates of birth, Social Security numbers, financial account numbers, dates of treatment or service, health insurance information, medical history, driver’s license numbers, patient numbers, medical record numbers, healthcare billing information, and other medical treatment information. The organization is providing breach notifications to affected individuals.
What You Can Do After the HCRS Data Breach
If your information was exposed in the data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force HCRS to ensure it takes proper steps to protect the information it was entrusted with.
Got a notice about the HCRS data breach? Fill out the form on this page today.
HCRS Data Breach Notice
Take Action
If you received a notice regarding the HCRS data breach, fill out the form on this page to get in touch with us.
An attorney or legal representative may then reach out to you to explain more about this investigation and ask you a few questions.
Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.
Published: August 8, 2025
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Milberg Coleman Bryson Phillips Grossman, PLLC who has sponsored this investigation.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
