MONTPELIER, Vt. — Vermont’s attorney general says a technology company will pay a $264,000 fine for a data breach that exposed the Social Security numbers of 660 Vermont Health Connect users.
SAManage USA, Inc. allowed a spreadsheet containing the hundreds of social security numbers to be publicly viewed in July 2016, without requiring authentication. Democratic Attorney General T.J. Donovan says a Vermonter discovered the breach and reported it to his office.
The North Carolina-based technology company provided support services for Vermont Health Connect.
SAManage USA said that the breach happened and that it complied with the attorney general’s investigation and enforcement actions.
Donovan said it appears the breach would have gone unreported without his office’s intervention. He said the company’s delay caused Vermont consumers to learn in September their social security numbers were exposed.