Millstone Medical Outsourcing, a Massachusetts-based medical device post-manufacturing and logistics provider, reported that suspicious activity affected its systems. The company became aware of the activity on December 16, 2025, and said data was subject to unauthorized access or acquisition between December 15 and 19, 2025. The company’s notice to USA TODAY said a review identified possible exposure on July 15, 2026. A report filed with the Vermont Attorney General’s Office on September 21, 2026, listed the affected information.
The reported data types include Social Security numbers, government ID numbers, credit and debit account information, financial account codes, and health records. The number of affected individuals and the date consumers were notified have not been disclosed in the source consulted.
Further details about the incident may emerge as reporting continues. The available source does not state whether additional notices were sent or provide a consumer notification date.