MedCom Solutions, Inc. filed a data breach notification with the Vermont Attorney General in November 2026 confirming that health records were involved in a security incident. The exact number of people affected and the cause have not been publicly disclosed. Anyone connected to MedCom Solutions should watch for an official notification letter and monitor their medical records and insurance statements for signs of misuse.
| Company | MedCom Solutions, Inc. |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the MedCom Solutions, Inc. Data Breach?
MedCom Solutions, Inc. recently filed a formal data breach notification with the Vermont Attorney General. The filing confirms that health records tied to individuals were involved in a security incident. As a result, the company is now notifying regulators and affected people under state breach notification laws.
The exact discovery date for this incident has not been publicly disclosed. However, the notification itself was filed in November 2026, which means the company had already completed at least part of its internal review by that point. Because many breach notification laws require companies to act within a set window after discovery, this filing suggests the underlying incident was identified sometime before the notice went out.
Details about the specific method used to access the data, such as whether this stemmed from a hacking incident, insider misuse, or another cause, have not been made public. In addition, the filing does not specify how MedCom Solutions first became aware of the breach. As more information becomes available through regulatory channels, additional facts about the investigation may come to light.
Who was affected?
The MedCom Solutions data breach may affect individuals whose health information was handled, stored, or processed by the company. Because MedCom Solutions operates in a capacity connected to health records, those affected could include patients, clients, or other individuals whose data passed through its systems.
The exact number of people affected has not been publicly disclosed. Similarly, the filing does not specify the geographic scope of the breach beyond the fact that it was reported to the Vermont Attorney General. This means residents of other states could also be affected, since breach notifications are often filed in multiple jurisdictions.
It is also not clear from the available filing whether minors or other vulnerable populations are among those affected. Anyone who has interacted with MedCom Solutions or organizations that rely on its services should watch for an official notification letter in the mail.
What Information Was Potentially Exposed?
According to the breach notification, the category of data confirmed to be involved in this incident is health records. Because this is the only data type specifically named in the filing, this article focuses on that category alone rather than speculating about other possible exposures.
- Health Records
Exposure of health records can carry serious consequences. For example, this type of information often includes details about diagnoses, treatments, or medical history that individuals consider deeply private. If this data falls into the wrong hands, it could be used for medical identity theft, where someone uses another person’s health information to obtain medical services or prescriptions fraudulently.
In addition, exposed health records can sometimes be combined with other leaked data to build a more complete profile of a victim. This increases the risk of targeted phishing attempts, since scammers can reference real medical details to make fraudulent messages seem credible. Because of this, affected individuals should treat any unexpected medical-related communication with caution.
What is the company doing?
MedCom Solutions, Inc. filed a formal notification with the Vermont Attorney General to disclose this incident, as required under state breach notification law. This step indicates the company has acknowledged the exposure of health records and is working through the required regulatory process.
Beyond the filing itself, the notification does not detail every remediation step MedCom Solutions has taken. However, companies that file these notices typically also work to secure affected systems, review how the exposure occurred, and determine whether additional safeguards are needed going forward.
At this time, the filing does not mention whether MedCom Solutions is offering credit monitoring or identity protection services to affected individuals. If such services become available, they would likely be detailed in direct notification letters sent to those impacted.
What Should Affected Individuals Do?
Watch for Official Notification Letters
Affected individuals should keep an eye out for an official letter from MedCom Solutions. This letter would typically explain what specific information was involved and what steps, if any, the company is offering to help protect those affected.
Because scammers sometimes impersonate breached companies after a public filing, it helps to verify any communication claiming to be from MedCom Solutions. Contacting the company directly through a verified phone number or website, rather than replying to an unexpected email, is the safest approach.
Monitor Your Health Insurance and Medical Records
Since health records were involved in this breach, affected individuals should regularly review their health insurance statements and explanation-of-benefits notices. This can help catch signs of medical identity theft early, such as unfamiliar charges or services you never received.
In addition, requesting a copy of your medical records periodically can help confirm that no false information has been added to your file. If anything looks unfamiliar, report it to your healthcare provider and insurer right away.
Stay Alert for Phishing and Scam Attempts
Because exposed health information can be used to craft convincing scam messages, affected individuals should be cautious of unexpected calls, emails, or texts referencing medical details. Scammers may pose as healthcare providers, insurers, or even MedCom Solutions itself.
As a result, it is wise to avoid clicking links or sharing personal information in response to unsolicited messages. Instead, verify the sender’s identity through official contact channels before responding to any request for personal details.
Check Your Credit Reports Regularly
Even though this filing centers on health records, it is still a good habit to review your credit reports for unusual activity. This helps catch any related fraud attempts that might stem from a broader identity theft scheme.
You can request free credit reports from the major credit bureaus and review them for unfamiliar accounts or inquiries. If you notice anything suspicious, reporting it quickly can limit potential damage and help you take corrective action sooner.
Consider Speaking With a Data Breach Attorney
If you believe you were affected by the MedCom Solutions data breach, it may be worth speaking with a data breach attorney about your options. An attorney can help you understand whether you qualify for compensation or a class action related to this incident.
Many attorneys offer free case evaluations, so there is generally no upfront cost to learn where you stand. This can also help you stay informed about deadlines for filing a claim, since these can vary depending on your state and the facts of the case.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General