Berkshire Health Systems, Inc.

Berkshire Health Systems, Inc. (BHS) notified the NH Attorney General and HHS of an insider threat involving a rogue employee at Fairview Hospital. The employee, hired in 2014, allegedly accessed patient records in the EMR system without legitimate business purpose starting potentially as early as 2014. The incident involves PHI (names, DOB, diagnosis, visit notes) of approximately 500 individuals. The employee was terminated, and BHS is conducting a lookback from Oct 2022. No evidence of data exfiltration was found, but access was unauthorized. BHS has implemented enhanced auditing and staff re-education.