Therapeutic Health Services (THS) suffered a data breach on February 26, 2024, reported by the Vermont Office of the Attorney General on July 18, 2024. The incident exposed sensitive personal and medical information of individuals, including full names, Social Security numbers, dates of birth, medical service details, and health records. The breach poses significant risks, as compromised data could facilitate identity theft, financial fraud, or targeted phishing attacks leveraging medical history. THS has engaged law enforcement and is providing complimentary credit monitoring to affected individuals as a mitigative measure. However, the exposure of highly regulated health data (protected under HIPAA) elevates the severity, given the potential for long-term harm to victims, including medical identity fraud or blackmail. The breach underscores vulnerabilities in healthcare data security, where unauthorized access to such granular personal and medical details can have profound reputational, financial, and operational consequences for both the organization and its patients. The incident aligns with broader trends of cyber threats targeting healthcare providers, where patient trust and regulatory compliance are critically at stake.
Source: https://ago.vermont.gov/document/2024-07-18-therapeutic-health-services-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/therapeutic-health-services
"id": "the116082125",
"linkid": "therapeutic-health-services",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Vermont, USA',
'name': 'Therapeutic Health Services (THS)',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Complimentary credit monitoring services offered to '
'affected individuals',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High (includes SSN, medical, and '
'health information)',
'type_of_data_compromised': ['Personal Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2024-02-26',
'date_publicly_disclosed': '2024-07-18',
'description': 'The Vermont Office of the Attorney General reported that '
'Therapeutic Health Services (THS) experienced a data breach '
'on February 26, 2024, potentially affecting personal and '
'medical information. Compromised data may include full name, '
'Social Security number, date of birth, medical services '
'information, and health records. THS has notified law '
'enforcement and is offering complimentary credit monitoring '
'services to affected individuals.',
'impact': {'brand_reputation_impact': 'Potential negative impact due to '
'exposure of sensitive personal and '
'medical data',
'data_compromised': ['Full name',
'Social Security number',
'Date of birth',
'Medical services information',
'Health information'],
'identity_theft_risk': 'High (due to exposure of SSN, DOB, and '
'personal health information)'},
'investigation_status': 'Ongoing (law enforcement notified)',
'references': [{'date_accessed': '2024-07-18',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulations_violated': ['Potential HIPAA violation '
'(if applicable)',
'State data breach '
'notification laws (e.g., '
'Vermont’s Security Breach '
'Notice Act)'],
'regulatory_notifications': 'Reported to the '
'Vermont Office of the '
'Attorney General'},
'response': {'incident_response_plan_activated': True,
'law_enforcement_notified': True,
'recovery_measures': 'Offering complimentary credit monitoring '
'services to affected individuals'},
'title': 'Therapeutic Health Services Data Breach',
'type': 'Data Breach'}