Where does the AcademyHealth case file come from?

Every entry is taken from the breach report AcademyHealth lodged with the Vermont Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: AcademyHealth Data Breach

This file collects the dated facts on record for the AcademyHealth incident. The state report is dated July 27, 2026.

Timeline

July 27, 2026Report filed in VermontDate the notice was lodged with the Vermont Attorney General.

Case facts

Filing state: Vermont
Date reported: July 27, 2026
Receiving office: Vermont Attorney General

Case notes

AcademyHealth, an organization dedicated to health policy and research, has formally notified the Vermont Attorney General's office about a data security incident. This official filing, dated July 27, 2026, makes the event part of the public record for those potentially impacted.

The public filing does not specify the nature of the breach or the particular categories of personal information that may have been exposed. Therefore, if you received a direct notification from AcademyHealth, that letter is the definitive source for understanding what specific data pertaining to you was involved in this incident.

AcademyHealth has indicated that the incident remains under active investigation. This means the organization is still working to ascertain the full scope and impact of the event, and additional information may become available as their inquiry progresses.

For individuals who have received a notification letter, it is recommended to review its contents thoroughly. General protective measures include remaining alert for any unusual activity across your online accounts, utilizing multi-factor authentication where available, and regularly monitoring financial and credit reports for any unfamiliar transactions or inquiries.

This documentation serves to confirm the data security event as reported by AcademyHealth to Vermont regulatory authorities. For precise details regarding how this incident affects your personal data and any specific recommendations, please refer directly to the communication you received from AcademyHealth.

Questions about this case file

Where does the AcademyHealth case file come from?: Every entry is taken from the breach report AcademyHealth lodged with the Vermont Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Vermont data breaches

Named in the AcademyHealth breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Vermont case files