Online Cybersecurity Master's Degree Available in Vermont In 2010, the Vermont Attorney General filed an enforcement action against Health Net for violations of the Vermont Security Breach Notification Act as well as the Vermont Consumer Fraud Act; this was the first time in Vermont's history that an enforcement action had ever been filed under the security breach notification law. The filing was in reference to a May 2009 security breach in which Health Net discovered that an unencrypted hard drive containing the financial and medical information of 1.5 million customers, including 525 Vermont residents, had been stolen. Health Net began mailing notification letters out to its customers six months after the identified breach, a measure the Vermont Attorney General felt was a violation of the state's security breach notification law requirement for notification without unreasonable delay. The data stored on the hard drive was also unencrypted, which was a violation of Vermont's Consume...