Springfield Hospital Data Breach Exposes Sensitive Patient Information Springfield Hospital, a not-for-profit critical access hospital in Springfield, Vermont, is under investigation following a data breach that compromised sensitive patient information. The incident, discovered on December 17, 2025, involved unauthorized access to an employee email account. After detecting the breach, the hospital secured its email system and initiated an investigation to assess the scope of the exposure. By February 10, 2026, the probe confirmed that the compromised account contained personally identifiable information (PII) and protected health information (PHI) for certain individuals. Exposed data included: - Full names - Dates of birth - Social Security numbers - Reasons for medical visits - Treating physician names - Medical record numbers The hospital serves communities across Windsor, Windham, and portions of Bennington counties in Vermont, as well as parts of Sullivan and Cheshire counties in New Hampshire, providing inpatient, outpatient, and emergency care services. A class action law firm, Shamis & Gentile P.A., is now investigating potential legal claims for affected individuals, who may be eligible for compensation. The breach highlights ongoing risks to healthcare data security and the potential consequences for patients whose information was exposed.