The covered entity (CE), Valley Mountain Regional Center, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 126,679 individuals. The PHI involved included names, addresses, birthdates, Social Security and drivers’ license numbers, and diagnoses. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE updated its administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Rules.
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: organization to hhs · backfill source
2026-09-25 · records: 54286 to 126679 · backfill source
2026-09-25 · disclosed: 2024-04-19 to 2023-09-29 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Valley Mountain Regional Center, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 126,679 individuals. The PHI involved included names, addresses, birthdates, So · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 54286 · backfill source
2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-04-19-valley-mountain-regional-center-data-breach-notice-consumers · backfill source
2026-09-25 · discovered: empty to 2024-02-20 · backfill source
