On June 13, 2022, Lamoille Health Partners discovered that an unknown, unauthorized third party locked some of its files in a ransomware attack. In a ransomware attack, a criminal deploys malicious software to lock an organization’s files until the organization pays a ransom or restores their data from backups. Upon learning of the incident, Lamoille Health Partners promptly used its established protocols and began securely restoring its systems from backups. Lamoille Health Partners also notified law enforcement and worked with a cybersecurity firm to investigate the incident. The investigation determined that an unknown third party may have accessed and acquired certain documents from its systems between June 12, 2022 and June 13, 2022 as a part of the incident.
On June 24, 2022, Lamoille Health Partners determined that the criminals could have accessed documents that included some individuals’ personal information. Following further investigation, Lamoille Health Partners determined that the incident may have resulted in unauthorized access to individuals’ names, addresses, dates of birth, Social Security numbers, health insurance information, and medical treatment information, that was provided to Lamoille Health Partners.
Lamoille Health Partners is notifying all involved individuals for whom it has a valid mailing address and has arranged for complimentary identity protection and credit monitoring services for those individuals whose Social Security numbers were potentially involved. Lamoille Health Partners has no reason to believe that any personal information has been misused for the purpose of committing fraud or identity theft, but as a precautionary measure, individuals should remain vigilant to protect against potential fraud and/or identity theft by reviewing their account statements and monitoring credit reports closely. If individuals detect any suspicious activity, they should notify the entity with which the account is maintained, and promptly report any fraudulent activity to proper law enforcement authorities, including the police and their state attorney general. Additional information regarding identity protection can be obtained at https://www.ftc.gov/idtheft or by calling the Federal Trade Commission at 1-877-ID-THEFT (1-877-438-4338).
Lamoille Health Partners takes its responsibility to safeguard personal information seriously and apologizes for any inconvenience or concern this incident might cause. Individuals seeking additional information may call a confidential, toll-free inquiry line at (855) 544-2834 from 9:00 a.m.- 6:30 p.m. Eastern Time, Monday through Friday, excluding some holidays.