Skip to content
Back to Blog
high severity November 13, 2026 · 2 min read

MedCom Solutions, Inc. Data Breach Notice (Vermont Attorney General)

If you were named in this filing, here’s what the filing says was exposed, and what to do about it.

MedCom Solutions, Inc. notified Vermont residents of a data breach in a filing reported to the Vermont Attorney General on November 13, 2026, and the notice lists health records among the information exposed.

MedCom Solutions, Inc. Data Breach Notice (Vermont Attorney General)

The health records of two Vermont residents were exposed in a data breach involving MedCom Solutions, Inc., according to a filing with the Vermont Attorney General dated November 13, 2026.

Health records are among the most sensitive categories of personal information because they can enable medical identity theft, insurance fraud, and long-term misuse that does not expire the way a credit card number does. Once exposed, this data can be used to file false claims, obtain prescriptions, or create fraudulent medical histories that follow an individual for years.

Health Records Create Lifelong Risks

Unlike financial account numbers that can be replaced, health records tie directly to your medical history and insurance coverage. Criminals can use them to impersonate patients, divert legitimate benefits, or generate bills for services never received. These consequences can damage credit, trigger unexpected insurance denials, and create inaccurate medical files that affect future care.

The filing lists health records as the exposed category in this incident. No other information categories are named. The record does not indicate that any passwords, Social Security numbers, or financial details were involved.

What the Limited Scale Means

Only two people are named in this filing. While the small number does not reduce the seriousness for those affected, it confirms the breach was narrowly scoped compared with typical healthcare incidents. The organisation is required to notify the affected individuals directly, usually by mail.

If you have not received a letter from MedCom Solutions, it is likely you were not among the two people included. However, if you have moved since the incident occurred, contact the organisation directly to confirm whether your records were involved. The filing does not state when the incident took place, so the letter remains the most reliable indicator.

Protecting Yourself After a Health Records Exposure

Monitor your Explanation of Benefits statements from every health insurer carefully for services you did not receive. Dispute any unfamiliar claims immediately. Consider placing a fraud alert with the major credit bureaus to add an extra layer of protection against identity theft attempts that could stem from medical fraud.

Review your medical records from providers periodically for accuracy. If you suspect someone has used your identity for medical services, contact your insurers and providers right away to correct the information. Keep records of all communications.

Be cautious about unsolicited calls or messages requesting confirmation of personal or insurance details. Verify requests directly with your known providers using contact information you already have on file, not information supplied in the message.

Report details & sourcing

Severity High includes at least one identifier that cannot be reissued
Disclosed November 13, 2026
Last reviewed November 13, 2026
Affected 2
Data exposed Health Records
Editorial & sourcing policy
GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.
Share this Post on X Reddit Email