Texas Spine Consultants, PLLC notified the Vermont Attorney General in September 2026 that a data breach exposed patients’ Social Security numbers and health records. The number of affected individuals has not been publicly disclosed. Affected patients should monitor credit reports, consider a credit freeze, and watch for phishing attempts referencing medical details.
| Company | Texas Spine Consultants, PLLC |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Social Security Numbers, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Texas Spine Consultants, PLLC Data Breach?
Texas Spine Consultants, PLLC recently filed a formal data breach notification confirming that patient information was exposed. The filing was submitted to the Vermont Attorney General in September 2026. This step is required whenever a company discovers that residents of that state had personal data compromised.
According to the notification, the exposed categories include Social Security numbers and health records. As a result, patients of this medical practice may have had deeply sensitive information accessed by unauthorized parties. The exact method used to breach the organization’s systems has not been publicly disclosed.
In addition, the specific date when the breach was discovered has not been made public. What is known is that the company moved to notify regulators and affected individuals once it understood the scope of the incident. Because many breach investigations involve forensic specialists, it is likely that outside experts helped determine what data was accessed and how.
Who was affected?
The individuals affected by this breach are most likely current and former patients of Texas Spine Consultants, PLLC. Because the practice provides specialized orthopedic and spine care, those impacted may include people who received treatment, diagnostic imaging, or surgical consultations through the organization.
The exact number of affected individuals has not been publicly disclosed. However, the fact that the company filed a notification with a state attorney general indicates that at least one resident of that state was impacted. In addition, because healthcare providers often serve patients from multiple states, the true scope of affected individuals could extend well beyond Vermont.
It is not currently known whether minors are among those affected. Given that spine specialists sometimes treat younger patients for scoliosis or injury-related conditions, this remains a possibility worth noting for families who received care at this practice.
What Information Was Potentially Exposed?
The breach notification specifically identifies two categories of compromised data. These categories represent some of the most sensitive forms of personal information a healthcare provider can hold.
- Social Security Numbers
- Health Records
Because Social Security numbers were involved, affected patients face a heightened risk of identity theft. Criminals can use this number, combined with a name and date of birth, to open new credit accounts, file fraudulent tax returns, or apply for loans in someone else’s name. This type of fraud can take months to detect and even longer to fully resolve.
The exposure of health records adds another layer of risk. Medical identity theft can occur when someone uses stolen health information to obtain treatment, prescriptions, or medical equipment under another person’s name. This can lead to inaccurate medical histories that may affect future care. In addition, exposed health records can be used for targeted phishing scams that reference real diagnoses or treatment details to appear more convincing.
What is the company doing?
Texas Spine Consultants, PLLC responded to the discovery of this incident by notifying state regulators as required by law. This notification process typically involves describing the categories of data involved and the general nature of the incident. The company also filed formal notification with the Vermont Attorney General.
Beyond the regulatory filing, the specific remediation steps taken by the organization have not been publicly detailed. Many healthcare providers in similar situations offer credit monitoring or identity protection services to affected patients. However, whether Texas Spine Consultants, PLLC is offering such services has not been confirmed in the available information.
Patients who believe they may be affected should watch for a formal notification letter. This letter would typically outline any protective services being offered and provide instructions for enrollment. In the meantime, affected individuals can take proactive steps on their own to reduce risk.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request copies of their credit reports from all three major credit bureaus. This allows patients to check for unfamiliar accounts, inquiries, or addresses that could signal fraud. Federal law allows consumers to request a free credit report from each bureau on a regular basis.
Because Social Security numbers were involved in this breach, ongoing vigilance is especially important. Fraudulent activity does not always appear immediately. For this reason, experts recommend checking credit reports periodically for at least the next year, rather than just once after receiving a notification letter.
Consider a Credit Freeze or Fraud Alert
A credit freeze restricts access to your credit file, making it much harder for identity thieves to open new accounts in your name. This is one of the strongest protective measures available to consumers whose Social Security numbers have been exposed. Freezing credit is free and can be lifted temporarily whenever you need to apply for credit yourself.
Alternatively, a fraud alert requires lenders to take extra steps to verify your identity before extending credit. This option is less restrictive than a freeze but still provides meaningful protection. Affected individuals can choose whichever option best fits their personal situation and comfort level.
Protect Against Medical Identity Theft
Because health records were part of this breach, patients should also review their medical billing statements and insurance explanation-of-benefits notices. Unfamiliar charges or services could indicate that someone else used your information to obtain care. If anything looks suspicious, contact your healthcare provider or insurer right away.
In addition, patients may want to request a copy of their medical records to verify accuracy. This helps ensure that no false information was added as a result of fraudulent medical activity. Catching errors early can prevent complications with future treatment or insurance claims.
Stay Alert for Phishing Attempts
Following a healthcare data breach, scammers often send emails or text messages designed to look like official communications. These messages may reference real medical details to appear legitimate. As a result, affected individuals should be cautious about clicking links or sharing information in response to unexpected messages.
Instead, verify any communication by contacting the organization directly using a phone number or website you know is legitimate. Never provide personal information to someone who contacts you first, especially if they claim urgency. When in doubt, consult a data breach attorney for guidance on your specific situation and whether you may be eligible for compensation.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General