The Vermont Office of the Attorney General disclosed a data breach at Coastal Hospice & Palliative Care, first detected on July 24, 2023, and reported publicly on January 22, 2024. The incident stemmed from a network disruption, compromising personal and/or protected health information (PHI) of an undetermined number of individuals. While the exact scope of the breach—including the type of data exposed (e.g., medical records, financial details, identifiers) and the number of affected patients or employees—remains unclear, the nature of the exposed information suggests a high-risk scenario. Hospice and palliative care providers handle highly sensitive data, including end-of-life care details, patient diagnoses, and family contacts, which could be exploited for identity theft, fraud, or targeted scams. The lack of transparency regarding the breach’s specifics exacerbates concerns about long-term reputational damage, regulatory penalties (HIPAA violations), and potential harm to vulnerable patients. Given the sector’s reliance on trust, the incident may erode confidence among patients, families, and healthcare partners, while also inviting scrutiny from state and federal regulators.