Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak and Cyber Attack.

Detection and Response: The company detects and responds to cybersecurity incidents through an containment measures with employee's access was immediately cut off, and and remediation measures with implemented additional safeguards, and containment measures with disabled compromised email accounts, containment measures with changed passwords..

Common Attack Types: The most common types of attacks the company has faced is Breach.

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Compromised Email Account, Email and Phishing email.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Demographic Information, Clinical Information, , Personally Identifiable Information, Health Information, , Names, Medical Record Numbers, Addresses, Dates Of Birth, Diagnostic And Treatment Information, Health Insurance Information, , Names, Medical Record Numbers, Addresses, Dates Of Birth, Health Insurance Information and .

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Implemented additional safeguards, .

Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by employee's access was immediately cut off, disabled compromised email accounts, changed passwords and .

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Vermont Office of the Attorney GeneralDate Accessed: 2022-11-10.

Last Attacking Group: The attacking group in the last incident was an Internal Employee.

Most Recent Incident Detected: The most recent incident detected was on 2022-08-23.

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2022-11-10.

Most Significant Data Compromised: The most significant data compromised in an incident were Demographic Information, Clinical Information, , Names, Addresses, Birth Dates, Treatment Information, Medical Record Numbers, Health Insurance Information, , Names, Medical record numbers, Addresses, Dates of birth, Diagnostic and treatment information, Health insurance information, , names, medical record numbers, addresses, dates of birth, health insurance information and .

Most Significant System Affected: The most significant system affected in an incident was Email Accounts and Public websites hosted by a third-party provider.

Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident were Employee's access was immediately cut off and Disabled compromised email accountsChanged passwords.

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Medical Record Numbers, Names, names, dates of birth, Addresses, Medical record numbers, Clinical Information, Birth Dates, medical record numbers, Dates of birth, health insurance information, Diagnostic and treatment information, Treatment Information, addresses, Health insurance information, Demographic Information and Health Insurance Information.

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 1.2K.

Most Recent Source: The most recent source of information about an incident is Vermont Office of the Attorney General.

Current Status of Most Recent Investigation: The current status of the most recent investigation is Resolved.

Most Recent Entry Point: The most recent entry point used by an initial access broker were an Phishing email, Compromised Email Account and Email.

Most Significant Root Cause: The most significant root cause identified in post-incident analysis was Internal Employee Curiosity, Phishing attack targeting employees.