US-VT
Timeline
- July 2, 2026
What a Vermont notice means
Required under 9 V.S.A. §2435. Notification to the Attorney General is required.
Note: the count is Vermont residents.
Cottage Hospital
healthcareHealthcareUnited States of America
Cottage Hospital is a healthcare organisation in Vermont. It appears on the HHS OCR breach portal, the Massachusetts Attorney General breach-notification register and the Vermont Attorney General breach-notification register with 2 confirmed incidents (3 filings); the most recent notice was filed on July 2, 2026.
Data as of September 4, 2026.
Filed in MA and NH — Hacking/IT Incident
The same incident was filed separately with 2 jurisdictions within a few days of each other (MA and NH) — shown here as one incident.
Timeline
Litigation
- Case filed — docket on CourtListener
What a Massachusetts notice means
Required under M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.
What a New Hampshire notice means
Required under RSA 359-C:20. Notification to the Attorney General is required.
Note: the count is New Hampshire residents.