Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewHCRS Data Breach 2025: What Happened and How to Protect Yourself
In December 2024, Health Care and Rehabilitation Services of Southeastern Vermont (HCRS) experienced a cybersecurity breach that potentially exposed personal and medical data of clients and staff. If you’ve received a notice from HCRS—or think your data may have been compromised—it’s important to understand the risks and take immediate steps to protect your identity. This guide breaks down the incident and outlines what you should do next.
When did the HCRS Data Breach Happen?
The unauthorized access occurred between December 4 and December 9, 2024. HCRS identified suspicious activity on December 20, 2024, and immediately began securing its systems. A thorough investigation, aided by cybersecurity professionals, confirmed on May 13, 2025, that two employee email accounts were compromised.
What information was exposed in the HCRS Data Breach?
Full names
Dates of birth
Social Security numbers
Financial account numbers
Dates of treatment/services
Health insurance information
Medical histories
Driver’s license numbers
Patient/medical record numbers
Healthcare billing details
Other treatment-related information
What can you do?
If you were affected or think you might have been take these steps to reduce your risk:
1. Monitor Your Accounts
Check your financial accounts and health insurance statements for any unfamiliar activity. Early detection can prevent larger issues.
2. Get Your Free Credit Reports
You’re entitled to one free credit report per year from each bureau:
Review them carefully for unauthorized activity.
3. Place a Fraud Alert or Credit Freeze
A fraud alert notifies lenders to take extra steps to verify your identity.
A credit freeze blocks access to your credit file entirely, stopping new accounts from being opened in your name.
Both are free and can be set up through the major credit bureaus.
4. Watch for Signs of Identity Theft
If you notice suspicious accounts or receive unfamiliar medical bills, report it immediately to:
Local law enforcement
Your state’s Attorney General
Talk to a Data Breach Attorney
Data breach lawyers can help you understand your rights and potential compensation options. You may be eligible to join a class action lawsuit to recover damages for financial losses, emotional distress, and other repercussions.
Links for more information
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.