G.I. Medicine Associates, P.C. Reports Vermont Patient Data Breach

G.I. Medicine Associates, P.C. has officially reported a data security incident to the Vermont Attorney General, confirming that patient data may have been compromised. The breach was filed on September 18, 2026, and indicates a significant failure in the protection of confidential medical records.

The compromised information includes highly sensitive categories such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This combination of data can expose individuals to severe risks.

When such detailed medical and personal data is exposed, patients face a heightened risk of medical identity theft. Unauthorized parties could use this information to obtain medical services, prescription drugs, or submit fraudulent claims under your name, potentially corrupting your medical history and causing significant financial and personal distress. Unlike credit card numbers, medical records are permanent, making the impact of their exposure long-lasting.

As a healthcare provider, G.I. Medicine Associates, P.C. is obligated by federal laws, including HIPAA, and Vermont state statutes to safeguard patient health information with robust security measures. The occurrence of this data breach raises serious questions about whether adequate protections were in place to prevent unauthorized access to these sensitive files.

If you have received a data breach notification letter from G.I. Medicine Associates, P.C., it is a formal acknowledgment that your information was involved in this security incident. Receiving this letter may grant you legal standing to pursue a claim for damages. We are currently monitoring this situation closely and offering free, no-obligation case reviews for affected patients to help them understand their legal options.