National Association of Drug Abuse Programs, Inc. Data Breach Notice (Vermont Attorney General)
If you were named in this filing, here’s what’s now in circulation.
National Association of Drug Abuse Programs, Inc. notified Vermont residents of a data breach in a filing reported to the Vermont Attorney General on July 15, 2026, and the notice lists social security numbers, health records among the information exposed.
The National Association of Drug Abuse Programs, Inc. has notified Vermont officials that the Social Security numbers and health records of five people were exposed in a data breach. The filing, submitted to the Vermont Attorney General on July 15, 2026, lists only these two categories of information.
Your Social Security Number Cannot Be Replaced
If you received a letter from the organisation, your SSN is now in the hands of an unknown party. Unlike a credit card or password, a Social Security number is permanent. It cannot be reissued on request the way other credentials can. This single number, paired with your name and date of birth, remains one of the most valuable pieces of data for identity thieves years after any breach.
Health records carry similar long-term risk. They can be used for insurance fraud, prescription fraud, or blackmail. Medical information is intimate and difficult to fully scrub from the systems that hold it. Once it leaves the organisation’s control, you cannot make it private again.
What the Filing Does Not Tell Us
The Vermont notice does not disclose when the incident occurred, how it happened, or whether the data was encrypted at rest. It also does not list passwords, financial account numbers, driver’s license numbers, or any other categories. No passwords were exposed.
Because the record names only Social Security numbers and health records, those are the only exposures you need to address. The absence of other common breach categories is genuine good news here. You do not need to worry about immediate account takeovers tied to this specific incident.
How to Determine If You Are One of the Five People Affected
The organisation is required to notify affected individuals directly, usually by mail. If you have not received a letter, it is likely your information was not included. However, letters can go to outdated addresses. Anyone who has moved since the time of the incident should contact the National Association of Drug Abuse Programs, Inc. directly to confirm whether their records were involved.
The Lifelong Nature of These Exposures
A Social Security number retains its value to criminals for decades because it never expires and cannot be changed at will. The same is true for detailed health information. These two categories create persistent risks that do not fade the way a stolen password does. Credit monitoring for a few years is therefore insufficient. You must treat this exposure as permanent and adjust your defenses accordingly.
Identity thieves can use your SSN to open new accounts, file fraudulent tax returns, or claim government benefits in your name. Health records can support fake medical claims or be sold on underground markets to people seeking insurance coverage under someone else’s identity. Both risks can surface long after the initial breach is forgotten.
What Remains Under Your Control
While you cannot change your SSN or erase your health history, you can limit how easily this information can be used against you. The key is early detection and strong barriers around new account creation and insurance claims.
- Place a freeze on your credit files at Equifax, Experian, and TransUnion. This prevents new accounts from being opened in your name without your explicit permission.
- Review every Explanation of Benefits statement from your health insurer. Look for services you did not receive. Report discrepancies immediately.
- Request your annual free credit reports and check them for unfamiliar accounts or inquiries.
- File your taxes early each year so fraudsters cannot file first using your SSN.
- Consider identity theft protection services that monitor for new account applications and medical claims made under your identifiers.
The filing itself is small — only five Vermont residents — but the categories involved make it significant for those affected. Social Security numbers and health records do not lose their danger over time. The letter you may receive is the only reliable way to know for certain whether you are in this group. If you have any connection to the National Association of Drug Abuse Programs, Inc. and have changed addresses in recent years, reaching out to them is the clearest next step.
What to do now
Steps that match what this notice says was exposed
Every step below is free and you do it yourself, and none of it depends on National Association of Drug Abuse Programs.
- Freeze your credit — this is the one that matters. A freeze is free, it takes minutes, and it has to be done separately at all three bureaus: Equifax, Experian and TransUnion. It stops a new account being opened in your name, which is what a Social Security number in the wrong hands is for. You can lift it temporarily whenever you need credit.
One more, whatever was exposed: a breach notice is a favourite disguise for a phishing email. If a message about this arrives, do not use its links — go to the company’s site yourself, or call the number on your statement.
