Regional Family Medicine
Disclosed Dec 12, 20232 years ago80,166 affectedConfirmed
The covered entity (CE), Regional Family Medicine, reported that it experienced a cybersecurity attack which potentially affected the protected health information (PHI) of approximately 80,166 individuals. The PHI involved included names, addresses, dates of birth, Social Security and drivers’ license numbers, claims and financial information, and treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented new technical safeguards in response.
What is known
| People affected | 80,166 (as reported to HHS) |
|---|---|
| Disclosed | Dec 12, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2023-12-13 Regional Family Medicine Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Regional Family Medicine (Healthcare Provider, AR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 12, 2023 | 80,166 |
| Vermont AGresidents of VT | Dec 13, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 80166 · backfill source
- 2026-09-25 · disclosed: 2023-12-13 to 2023-12-12 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Regional Family Medicine, reported that it experienced a cybersecurity attack which potentially affected the protected health information (PHI) of approximately 80,166 individuals. The PHI involved included names, a · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.