The U.S. Department of Health and Human Services reported that Three Rivers Provider Network experienced a hacking incident on December 19, 2022, affecting 4,725 individuals. The breach involved an email phishing scheme that compromised protected health information (PHI) including names, addresses, dates of birth, Social Security numbers, claims information, health insurance information, diagnoses, medications, and other treatment details.

Three Rivers Provider Network (“TRPN”) suffered a data breach to the Vermont Attorney General after the an unauthorized party accessed an employee’s email account containing sensitive information belonging to certain individuals. The breach compromised the names, dates of birth, addresses, Social Security numbers, passport numbers, driver’s license or state-issued ID numbers, and health information. A number of individuals are facing the very real threat of identity theft due to the Three Rivers Provider Network data breach. However, the company secured the affected account and launched an investigation and alerted the impacted individuals.

The California Office of the Attorney General reported that Three Rivers Provider Network experienced unauthorized access to an employee email account on June 3, 2022. Personal information potentially accessed includes names, addresses, phone numbers, and email addresses of individuals. The breach was reported on November 9, 2022.