Tri-Cities Gastroenterology Data Breach Exposes Sensitive Patient Records

Tri-Cities Gastroenterology, a specialized medical practice based in Vermont, has reported a significant data security incident. On April 29, 2026, the organization disclosed that an unauthorized party gained access to systems containing private patient information. This breach highlights the ongoing challenges healthcare providers face in safeguarding the extensive personal and medical data they are entrusted with.

The compromised data is extensive and deeply personal, including individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such a comprehensive set of personal and health details can lead to severe consequences, far beyond mere inconvenience.

Unlike a compromised credit card, which can be canceled, leaked Social Security Numbers and medical history cannot be easily changed, exposing victims to long-term risks. This includes medical identity theft, where criminals use your information to obtain healthcare services, and various forms of financial fraud. The detailed nature of the exposed medical information also makes individuals vulnerable to highly sophisticated phishing scams that appear legitimate.

Healthcare organizations like Tri-Cities Gastroenterology are legally obligated under the Health Insurance Portability and Accountability Act (HIPAA) to protect patient data through robust security measures. A breach of this magnitude suggests potential failures in these critical safeguards. Receiving a notification letter from Tri-Cities Gastroenterology indicates that your personal information was part of this compromise, establishing your standing as an affected party.

If you have received a data breach notification from Tri-Cities Gastroenterology, you don't need to demonstrate immediate financial loss to consider your legal options. The mere exposure of your confidential data can constitute a compensable injury under privacy laws. Our team is actively investigating claims on behalf of patients impacted by this incident and offers free, no-obligation case reviews to help you understand your rights and potential next steps.