critical severity September 23, 2026 · 2 min read

Health Access Network Inc. Data Breach Notice (Vermont Attorney General)

If you were named in this filing, here’s what the filing says was exposed, and what to do about it.

Health Access Network Inc. notified Vermont residents of a data breach in a filing reported to the Vermont Attorney General on September 23, 2026, and the notice lists social security numbers, health records among the information exposed.

Health Access Network Inc. Data Breach Notice (Vermont Attorney General)

The filing from Health Access Network Inc. means that the Social Security numbers and health records of 35 people are now outside the organisation’s control. If you received a notification letter, your information is among them.

A Social Security number cannot be replaced like a credit card. Once it is exposed it remains a lifelong key that can be used for identity theft, tax fraud, or opening accounts in your name. Health records carry their own permanent risks: they can be used for insurance fraud, prescription abuse, or blackmail involving sensitive medical details.

Why These Two Categories Matter Long After the Filing

The Vermont Attorney General’s record lists only Social Security Numbers and Health Records for this incident. No passwords were exposed. This is genuinely good news: there is no immediate risk to any online account you hold with the organisation, and you do not need to change any passwords because of this breach.

What was exposed cannot be undone. An SSN combined with health information gives a fraudster exactly what many government agencies and insurers use to verify identity. Medical details can also reveal conditions that could be leveraged against you in employment, insurance applications, or personal disputes.

You’ve used today’s 5 free articles · resets tomorrow

Create a free account to keep reading

The rest of this article comes straight back — free, no card, nothing you’ve already read goes away. Then see whether your own data is exposed too: the scan on this site is free with or without an account, and the account is what keeps the result after the emailed link expires.

Reading this for a company?

GalaxyWarden Signals watches the organisations you name and emails you when one of them actually discloses — SEC 8-K Item 1.05 filings and corroborated breach records, with a JSON API. It monitors companies, not people: it does not scan you and does not remove your personal data.

See GalaxyWarden Signals →

Or make a free reader account first

Free reader account

No card, no charge. You read the blog without a limit — every article, no daily count — and it saves your exposure-scan results so you can open them again after the emailed link expires. We won’t email you anything else unless you tick the box asking us to. The next step shows what the paid plans add — free stays the first option on it.

Create a free account →

Free accounts are for personal use. If you’re reading for a company, that’s Signals (terms).

Already have an account? Log in

Report details & sourcing

Severity Critical identifiers that cannot be reissued, alongside documents or accounts that can be misused now

Disclosed September 23, 2026

Last reviewed September 23, 2026

Affected 35

Data exposed Social Security Numbers, Health Records

By GalaxyWarden Threat Research · Editorial & sourcing standards

Editorial & sourcing policy

GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.

Related breaches

critical September 30, 2026

Health Access Network Inc. Data Breach Notice (Vermont Attorney General)

Why These Two Categories Matter Long After the Filing

Report details & sourcing

Related breaches

Poppins Payroll Data Breach Notice (Vermont Attorney General)

OneMain Financial Group, LLC Data Breach Notice (Vermont Attorney General)

PDCM Insurance Data Breach Notice (Vermont Attorney General)