Baltimore Medical System Data Breach Notice to Consumers

Baltimore Medical System, Inc. submitted a data breach notification to the Vermont Attorney General's Office on April 2, 2026. The notice informs consumers that personal information was compromised in a security incident. Vermont law requires entities experiencing data breaches affecting state residents to notify the AG within 14 days of discovering the breach.

Healthcare providers like Baltimore Medical System that store patient data are subject to HIPAA breach notification requirements in addition to state-level requirements. Patients whose information may have been exposed should monitor explanations of benefits, credit reports, and consider identity theft protection services.