The Vermont Office of the Attorney General disclosed a data breach affecting Intellihartx, LLC, linked to a vulnerability in its third-party secure file transfer protocol provider, Fortra, discovered on February 2, 2023. The incident exposed sensitive personal and medical data of 988 Rhode Island residents, including names, addresses, medical billing/insurance details, diagnoses, medications, dates of birth, and Social Security numbers. The breach was formally reported on June 8, 2023, indicating a delayed public notification. The compromised data—particularly Social Security numbers and medical records—poses significant risks of identity theft, financial fraud, and unauthorized access to private health information. Given the nature of the exposed data, the breach falls under a high-severity category due to the potential for long-term harm to affected individuals, including reputational damage to Intellihartx and possible regulatory penalties for failing to safeguard protected health information (PHI) under laws like HIPAA.

The Maine Office of the Attorney General reported that Intellihartx, LLC experienced a data breach on January 28, 2023, involving its secure file transfer protocol provider, Fortra. Approximately 489,830 individuals were affected, including 70 Maine residents, with compromised information including names, addresses, medical billing information, and Social Security numbers. Intellihartx, LLC began notifying affected individuals on June 8, 2023, and is offering identity theft protection services through Experian for one year.