Millstone Medical Outsourcing, LLC discovered suspicious activity on its systems on December 16, 2025. Its investigation found that company data was accessed or acquired without authorization between December 15 and 19, 2025. A review identified personal information that may have been exposed on July 15, 2026. The breach was reported to the Vermont Attorney General’s Office on September 21, 2026, and was described in reporting published later that month.
The reported information included Social Security numbers, government ID numbers, financial account codes, credit and debit account information, and health records. The number of affected individuals has not been disclosed in the sources consulted. Public reporting does not specify when individual consumers were notified.
As of September 24, 2026, further details may emerge as information about the incident and its notification process becomes available.