HackingDelayed DiscoveryPIIIDENTITY_BASICLowContained
SAINT MARY'S HOME OF ERIE
bd_84e620c2edb68002 · schema v1 · pii pii-v1
Full breach record for SAINT MARY'S HOME OF ERIE →Saint Mary’s Home of Erie notified consumers of a security incident where files on certain databases were accessible to unauthorized parties between August 26-28, 2025. The incident was discovered on August 27, 2025. The organization engaged third-party specialists, remediated access, and implemented additional security measures. Affected individuals are offered 12 months of credit monitoring. The specific data types were redacted in the source text but implied to be personal information.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by worldleaks about this victim predates this filing by 176 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_d875231e7b26e02aLeak Siteworldleaksfiled 2025-08-28(176d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_0cebb5ff6b5c5560Indiana State AGfiled 2026-02-20Verified
- bd_101841a341a4d5fbMaine State AGfiled 2026-02-20Verified
- bd_d1d2b1a9b5dd8232Indiana State AGfiled 2026-02-20Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-20-saint-marys-home-erie-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2026
- Raw hash
- fe03fe50ce838c12f9ca5d0260c99e27d04d9c934c421f2ae8e1ce9df147c236
Reporting entity
- Name
- SAINT MARY'S HOME OF ERIEnorm: saint mary s home of erie
- Domain
- smhe2.org
Victim entity
- Name
- SAINT MARY'S HOME OF ERIEnorm: saint mary s home of erie
- Domain
- smhe2.org
Incident
- Discovered
- Aug 27, 2025
- Materiality determined
- —
- Notification sent
- Feb 20, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(177 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.