VillageCareMAX Reports Data Breach Affecting Sensitive Patient Information VillageCareMAX, a healthcare provider, disclosed a data breach involving the potential exposure of sensitive personal and health information. The incident stemmed from unauthorized access to systems managed by TMG Health, Inc. (TMG), a third-party call center administrator contracted by VillageCareMAX. According to the breach notice, TMG detected the intrusion after an unauthorized individual gained access to VillageCareMAX-related data stored on TMG’s systems. The exposure window spanned nearly ten months, from November 20, 2024, to September 19, 2025. Following an investigation, TMG confirmed that compromised data may have included: - Full names - Social Security numbers - Member identification numbers - Protected health information VillageCareMAX began notifying affected individuals on January 13, 2026, via mailed breach notification letters. The notices detail the specific types of exposed data for each impacted person and include complimentary credit monitoring services. The breach was formally reported to the Massachusetts Attorney General’s office, with documentation available through the provided filing link. The full scope of affected individuals and the exact cause of the breach remain under review.