RansomwareLawGroup.com

> Cause not stated in filing

Tri-Cities Gastroenterology data breach investigation

Tri-Cities Gastroenterology reported a significant data security incident to the Vermont Attorney General in April 2026, confirming that highly sensitive patient data was exposed. This breach creates severe, long-term risks for affected individuals, including medical identity theft and various forms of fraud.

Filed
April 29, 2026
Regulator
Vermont AG
People affected
Not stated
File status
Monitoring

What the filing confirms

  • Tri-Cities Gastroenterology reported the incident to the Vermont Attorney General.
  • Information involved: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates.

Still unknown

  • How many people were affected. The filing does not give a number.
  • What caused the incident beyond the description in the filing.
  • How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Read the filing at the source

Investigation notes

Tri-Cities Gastroenterology, a specialized medical practice focused on digestive disorders, reported a data security incident to the Vermont Attorney General on April 29, 2026. This report confirms that patient data maintained by the practice was compromised due to an unspecified security breach within their systems or a third-party vendor.

The exposed data includes a dangerous combination of personal and health information. Specifically, the breach involved individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of these specific data types presents long-term risks for those affected.

Unlike a compromised credit card, which can be canceled, leaked medical records and Social Security Numbers cannot be changed. This puts individuals at heightened risk for medical identity theft, where unauthorized parties might seek treatment using their identity, as well as targeted financial fraud and phishing scams that leverage personal health details to appear legitimate. It is crucial for affected individuals to understand these unique risks.

As a healthcare provider, Tri-Cities Gastroenterology is legally bound by strict regulations, including HIPAA, to protect patient data. These laws mandate robust security measures, such as network monitoring, access controls, and data encryption. The occurrence of a breach of this nature raises serious questions about whether the practice adequately met its legal duty to safeguard sensitive patient information from foreseeable cyber threats.

If you received a data breach notification letter from Tri-Cities Gastroenterology, it serves as formal acknowledgment that your private information was compromised due to inadequate security. This establishes your legal standing to pursue potential claims. You do not need to have suffered immediate financial losses to explore your legal options. Our firm is currently investigating potential class action claims against Tri-Cities Gastroenterology on a contingency fee basis, meaning there are no upfront costs or out-of-pocket expenses for you unless we secure a recovery.

What our attorneys examine

A cyberattack does not excuse a company from protecting the information it holds. We look at whether Tri-Cities Gastroenterology used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Vermont.

Tri-Cities Gastroenterology data breach questions

How many people were affected by the Tri-Cities Gastroenterology data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Is the Tri-Cities Gastroenterology data breach letter legit or a scam?
A notice from Tri-Cities Gastroenterology in the mail matches the breach Tri-Cities Gastroenterology reported to the Vermont Attorney General on April 29, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Tri-Cities Gastroenterology through a phone number or website you find yourself.
Did Tri-Cities Gastroenterology offer free credit monitoring?
Any free monitoring Tri-Cities Gastroenterology is offering will be described in the notice you received, along with an activation code and a sign-up deadline. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Signing up doesn't waive any legal rights you may have.
Is there a Tri-Cities Gastroenterology data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Tri-Cities Gastroenterology. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
What should I do after getting the Tri-Cities Gastroenterology data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Where can I see the official Tri-Cities Gastroenterology breach notice?
Tri-Cities Gastroenterology's report is published by the Vermont Attorney General: https://ago.vermont.gov/categories/security-breach-notices#tri-cities-gastroenterology-2026-04-29 Compare it with the letter you received to confirm the dates and details match.
Do I need a Tri-Cities Gastroenterology data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Can I sue Tri-Cities Gastroenterology over the data breach?
It depends on what was exposed, the law in Vermont and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
How much could a Tri-Cities Gastroenterology data breach settlement or claim be worth?
There is no set amount, and no Tri-Cities Gastroenterology settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Date of Birth, Social Security Number as involved. Keep receipts and records; they're what damages claims are built on.

Other open files in Vermont

Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.