DisclosureLens
HackingHealthcareHealthcareDelayed DiscoveryPIIIdentity (basic)LowContained

SAINT MARY'S HOME OF ERIE

bd_84e620c2edb68002 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 27, 2025

Filed

Feb 20, 2026

To disclose

25 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

66%
Full breach record for SAINT MARY'S HOME OF ERIE →2 incidents on file

Saint Mary’s Home of Erie notified consumers of a security incident where files on certain databases were accessible to unauthorized parties between August 26-28, 2025. The incident was discovered on August 27, 2025. The organization engaged third-party specialists, remediated access, and implemented additional security measures. Affected individuals are offered 12 months of credit monitoring. The specific data types were redacted in the source text but implied to be personal information.

Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days
discovery → filing · 25 weeks / 177 days

Aug 26, 2025

Begins

Aug 27, 2025

Discovered

Feb 20, 2026

Filed

vs. sector median

+14 wks slower

This filing is one of 8 about the same incident.View merged incident
A leak claim by worldleaks about this victim predates this filing by 176 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 119d gap

Filing propagation · 7 filings · 6 states

View merged incident ↗
HHS OCROct 24 · first
Massachusetts State AG+119d
Indiana State AG+119d
Maine State AG+119d
New Hampshire State AG+119d
Indiana State AG+119d
Vermont State AG+119d · this page

Pattern: first filing Oct 24 (PA), last Feb 20 (VT) — a 119-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.