Boston Healthcare for the Homeless Program Data Breach Notice (Vermont Attorney General)

The filing from Boston Healthcare for the Homeless Program means that the personal information of 169 people, including Social Security numbers, government ID numbers, financial account codes, credit and debit account information, and health records, has been exposed in a data breach.

If you received a letter from the organisation, your records were part of this incident. The absence of a letter usually means you were not included, though anyone who has moved since the incident should contact Boston Healthcare for the Homeless Program directly to confirm their status.

Your Social Security Number and Health Records Cannot Be Replaced

A Social Security number does not expire and cannot be reissued on request the way a compromised credit card can. Once it is exposed, it remains a lifelong key that can be used to open accounts, file fraudulent tax returns, or claim government benefits in your name. The same permanence applies to your health records. Medical information tied to your identity can be used for insurance fraud, prescription fraud, or to build a more convincing synthetic identity.

The Vermont Attorney General filing lists these exact categories and no others. No passwords were exposed. This is genuinely good news: there is no credential here for an attacker to test on other sites, and you do not need to change any password connected to this provider.