HCF of Warren

The Vermont Office of the Attorney General reported a data breach involving HCF of Warren on January 9, 2025. The breach was discovered on October 3, 2024, due to suspicious activity on the management company’s computer network, which was accessed by an unauthorized third party on September 17, 2024, potentially affecting personal information such as names, addresses, phone numbers, dates of birth, Social Security numbers, medical information, and health insurance information.

Source: https://ago.vermont.gov/document/2025-01-09-hcf-warren-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/hcf-management-inc-

"id": "hcf230080525",
"linkid": "hcf-management-inc-",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Warren, Vermont',
                        'name': 'HCF of Warren',
                        'type': 'Management Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'phone numbers',
                                              'dates of birth',
                                              'Social Security numbers',
                                              'medical information',
                                              'health insurance information']},
 'date_detected': '2024-10-03',
 'date_publicly_disclosed': '2025-01-09',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving HCF of Warren on January 9, 2025. The breach '
                'was discovered on October 3, 2024, due to suspicious activity '
                'on the management company’s computer network, which was '
                'accessed by an unauthorized third party on September 17, '
                '2024, potentially affecting personal information such as '
                'names, addresses, phone numbers, dates of birth, Social '
                'Security numbers, medical information, and health insurance '
                'information.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'phone numbers',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'medical information',
                                 'health insurance information']},
 'references': [{'date_accessed': '2025-01-09',
                 'source': 'Vermont Office of the Attorney General'}],
 'threat_actor': 'Unauthorized Third Party',
 'title': 'Data Breach at HCF of Warren',
 'type': 'Data Breach'}