Child & Family Services of the Upper Peninsula Reports Vermont Data Breach

Child & Family Services of the Upper Peninsula, Inc. filed a data breach report with the state of Vermont on April 21, 2026. The incident involved the exposure of highly sensitive client information, including mental health records and family assessment data, affecting individuals who utilized their services.

State: Vermont
Reported: April 21, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Mental Health and Counseling Records
Medical History and Treatment Information
Health Insurance and Billing Details
Home Address and Contact Information
Family and Child Welfare Assessment Data

Child & Family Services of the Upper Peninsula, Inc. submitted a data breach notification to the Vermont Attorney General on April 21, 2026. This filing indicates that a security incident resulted in the unauthorized disclosure of confidential client data managed by the organization.

The exposed information includes a range of deeply personal details. Categories of data involved are Full Name, Date of Birth, Social Security Number, Mental Health and Counseling Records, Medical History and Treatment Information, Health Insurance and Billing Details, Home Address and Contact Information, and Family and Child Welfare Assessment Data.

The nature of this compromised data, particularly records pertaining to mental health, medical history, and family welfare assessments, carries significant privacy implications. Such an exposure could lead to risks such as identity theft, fraudulent use of personal identifiers, or unauthorized access to sensitive personal and health histories for affected individuals, including minors.

Individuals who receive a breach notification from Child & Family Services of the Upper Peninsula, Inc. should carefully review its contents for specific details. As a protective measure, it is advisable to regularly monitor credit reports and financial statements for any suspicious activity. Additionally, individuals should be cautious of unsolicited communications, especially those requesting personal information or account details.

This information is based on public filings made with state regulators.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Vermont Attorney General filing

Related data breach cases

Browse all Vermont data breaches View the full case directory