A cybercriminal accessed the email account of an employee at the University of Vermont Health Network, Elizabethtown Community Hospital. This account contained personal information, including Social Security numbers, names, and dates of birth.
The hospital responded immediately, changing passwords, implementing enhanced security features and engaging a leading forensic security firm to assist with the investigation. Following an initial 60-day probe which revealed no evidence of any fraud or identity theft to any individual, the hospital notified about 32,000 potentially affected individuals and provided information on steps they could take to protect themselves against potential fraud or identity theft.
The 1,200 individuals whose Social Security numbers were included in the email account will be offered free credit and identity theft monitoring services