Skip to content

HCF of Warren

Disclosed Jan 9, 20251 year ago2,709 affectedConfirmed

Official notice

The covered entity (CE), HCF of Warren dba Warren Manor, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 2,709 individuals. The PHI involved included names, addresses, Social Security numbers, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media. In response to the breach the CE and BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards.

What is known

People affected2,709 (as reported to HHS)
DisclosedJan 9, 2025
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
Vermont Attorney General: 2025-01-09 HCF of Warren Data Breach Notice to Consumersago.vermont.gov · Official notice
HHS OCR breach report (archive, resolved): HCF of Warren (Healthcare Provider, PA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
Vermont AGresidents of VTJan 9, 2025
HHS archivetotalJan 9, 20252,709
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 2709 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), HCF of Warren dba Warren Manor, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 2,709 individuals. The PHI involved included names, add · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about HCF of Warren

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.