New Century Ophthamology P.C. notified the Vermont Attorney General in November 2026 that a data breach exposed patients’ Social Security numbers, government ID numbers, and health records. The number of affected individuals has not been publicly disclosed. If you received care from this practice, watch for an official notification letter and consider placing a credit freeze immediately.
| Company | New Century Ophthamology P.C. |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the New Century Ophthamology P.C. Data Breach?
New Century Ophthamology P.C. recently disclosed a data breach that compromised sensitive patient information. The practice filed a formal notification with the Vermont Attorney General’s office in November 2026. This filing confirmed that unauthorized parties had access to protected patient records.
At this time, the exact discovery date of the breach has not been publicly disclosed. Similarly, the specific method the attacker used to gain access has not been detailed in public filings. However, the filing itself confirms that personal and medical data were involved in the incident.
Following discovery, the practice likely conducted an internal review to determine the scope of the exposure. As a result, New Century Ophthamology P.C. identified which categories of patient data were affected. The company then proceeded with required regulatory notifications, including the filing with Vermont’s Attorney General.
Because ophthalmology practices routinely store highly sensitive clinical and identity data, breaches like this one carry significant weight. This incident serves as a reminder that healthcare providers of all sizes remain frequent targets for data theft.
Who was affected?
The breach affected patients of New Century Ophthamology P.C. whose personal and health information was stored in the practice’s systems. This likely includes individuals who received eye care services, consultations, or treatments through the practice.
The exact number of affected individuals has not been publicly disclosed. In addition, the geographic scope of affected patients has not been specified beyond the fact that Vermont’s Attorney General received formal notice. Because medical practices often serve patients across state lines, it is possible that individuals outside Vermont are also affected.
There is no indication in the filing regarding whether minors were among those impacted. However, pediatric and family eye care is common at many ophthalmology practices, so this possibility cannot be ruled out. Patients who received care at this practice should consider themselves potentially affected until official notification letters clarify otherwise.
What Information Was Potentially Exposed?
According to the breach notification filed with Vermont regulators, several categories of sensitive data were involved in this incident. This information could place affected individuals at risk for various forms of fraud and misuse.
- Social Security Numbers
- Government ID Numbers
- Health Records
The exposure of Social Security numbers represents a serious risk. These numbers are a key piece of identity verification used across financial institutions, government agencies, and employers. As a result, criminals can use stolen Social Security numbers to open new credit accounts, file fraudulent tax returns, or apply for loans in a victim’s name.
In addition, the exposure of health records raises distinct concerns separate from financial fraud. Medical identity theft can occur when someone uses stolen health information to obtain medical services or prescription drugs under another person’s name. This type of fraud can corrupt medical records and lead to billing complications that are often difficult to untangle. Because government ID numbers were also involved, affected patients face compounded risk across multiple types of identity-based fraud.
What is the company doing?
New Century Ophthamology P.C. responded to the breach by filing a formal notification with state regulators. This step fulfills a legal obligation that healthcare providers must follow when patient data is compromised. The practice also filed notice with the Vermont Attorney General, as required under state breach notification law.
Beyond the regulatory filing, the public record does not detail additional remediation steps taken by the practice. It is common, however, for healthcare organizations in this situation to review and strengthen their data security practices following an incident like this. Patients should watch for direct notification letters from the practice, which typically include specific guidance and any available protective resources.
If the practice offers credit monitoring or identity protection services, affected individuals would typically learn this through official notification correspondence. Because such details have not been publicly disclosed at this time, patients should contact the practice directly if they have questions about their specific situation.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should regularly check their credit reports for unfamiliar accounts or inquiries. You can request free credit reports from all three major credit bureaus through AnnualCreditReport.com. Reviewing these reports consistently helps you catch fraudulent activity early.
Because Social Security numbers were involved in this breach, the risk of new account fraud is elevated. Therefore, it makes sense to check your reports more frequently than usual for the next year. If you notice anything suspicious, report it to the credit bureau immediately.
Consider a Fraud Alert or Credit Freeze
Given that Social Security numbers and government ID numbers were exposed, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires creditors to verify your identity before opening new accounts. A credit freeze goes further by blocking access to your credit file entirely.
You can place a freeze for free with each of the three major credit bureaus: Equifax, Experian, and TransUnion. This process typically takes just a few minutes online or by phone. While a freeze may add a small extra step when you apply for new credit yourself, it significantly reduces the risk of identity thieves opening accounts in your name.
Protect Against Medical Identity Theft
Because health records were part of this breach, affected patients should watch for signs of medical identity theft. This includes reviewing insurance statements and medical bills for services you did not receive. Unfamiliar charges can indicate that someone used your information fraudulently.
If you spot errors in your medical records or unexpected bills, contact your healthcare provider and insurance company right away. In addition, request a copy of your medical records to verify their accuracy. Correcting fraudulent medical entries early can prevent complications with future treatment and insurance claims.
Stay Alert for Phishing Attempts
After a breach like this, scammers often use exposed information to craft convincing phishing emails or phone calls. These messages may impersonate the practice, your insurer, or a government agency. Because the attackers may already know some of your personal details, these scams can seem unusually credible.
Never click links or provide personal information in response to unsolicited messages. Instead, contact the organization directly using a verified phone number or website. This simple habit can prevent you from falling victim to follow-up scams tied to this breach.
Consult a Data Breach Attorney
Given the sensitive nature of the exposed data, affected individuals may want to consult with a data breach attorney. An attorney can help you understand your legal rights and whether you qualify for compensation. Many offer free consultations to evaluate your specific situation.
Because healthcare data breaches often involve strict legal protections under laws like HIPAA, an attorney can clarify what obligations New Century Ophthamology P.C. had and whether those were met. This guidance can be especially valuable if you experience financial or medical harm as a result of this incident.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General