November 3, 2026: Mindbloom Provider Group, PA, the clinical practice that provides Mindbloom's at-home ketamine therapy, filed a security breach notice with the Vermont Attorney General. The filing lists health records as the data involved. It does not give a cause, dates or a national total. The catalog entry records the filing.
What is known
- The Vermont listing is dated November 3, 2026, under the health care sector.
- It lists one Vermont resident and the data type "Health Records".
- Mindbloom treats patients across many US states through telehealth, so a single Vermont resident usually means a wider national notice. No total has been published.
What is not confirmed
- Some coverage says clinical notes, diagnoses, treatment plans, prescription details and insurance data may be involved. That list does not come from the Vermont filing, and Mindbloom has not confirmed it.
- How the breach happened and when.
- Whether Social Security numbers or payment details were involved. The filing names only health records.
Mindbloom has not published a statement. Vermont no longer posts copies of consumer letters, so the notice text is not public.
Why this matters
Mental health and ketamine treatment records are among the most sensitive kinds of health data. Their exposure can lead to embarrassment, discrimination or extortion, and stolen therapy records have been used to blackmail patients before. Prescription data for a controlled substance adds a further risk of targeted scams.
What to do
- If you are or were a Mindbloom patient, watch for a notice letter and read which data it says was involved for you. The details can differ by person.
- Contact Mindbloom through its official website or patient portal for confirmation. Do not use contact details from unexpected emails or texts.
- Ignore any message that threatens to publish your treatment details unless you pay. Report it to the FBI at ic3.gov and do not reply.
- Check insurance explanation-of-benefits statements for treatment you did not receive.
- If the letter mentions Social Security numbers, freeze your credit with all three bureaus.
Sources
- Vermont Attorney General, Security Breach Notices (listing dated November 3, 2026)
- Strauss Borrelli PLLC, November 4, 2026
- Yahoo News (via GEEKSPIN), November 5, 2026
Sourcing note: the Vermont listing is the only official record. The list of clinical data types comes from secondary coverage and is unconfirmed.