Springfield Hospital, a not-for-profit critical access hospital in Springfield, Vermont, experienced a data breach on December 17, 2025. This incident involved unauthorized access to an employee email account, and the scope of the breach was confirmed on February 10, 2026. The hospital began notifying affected individuals on February 10, 2026, and filed a notice with the Massachusetts Attorney General on April 10, 2026.
The confirmed data types involved in this breach include full names, dates of birth, contact information, Social Security numbers, medical information such as reasons for visit and treating physician names, and medical record numbers. At least 41 residents of Massachusetts were affected, though the total number of individuals impacted has not been publicly specified. No evidence of identity theft or fraud has been reported.
Details about the full extent of the breach and potential implications are still emerging. Notices to affected individuals may be ongoing.