YORK HOSPITAL

York Hospital reported to HHS on 2025-12-23 a Unauthorized Access/Disclosure affecting 1259 individuals. Breached information located on Paper/Films. An employee mailed PHI of 1,259 individuals to the wrong recipients. The PHI involved included demographic information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect PHI.

York Hospital notified the NH Attorney General of a supplemental breach disclosure. On Feb 22, 2016, cybercriminals stole personal info (names, SSNs, addresses, W-2s) of employees. ~235 NH residents and ~1,211 Maine residents were affected. No patient data was compromised. Hospital engaged forensics, notified law enforcement, and offered credit protection.

York Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-03-14. 27 Massachusetts residents were affected. The report records the breach type as electronic.

On February 22, 2016, cybercriminals stole personal identification information of York Hospital employees, including names, social security numbers, addresses, and 2015 W-2 wages. Approximately 1,211 Maine residents were affected, along with residents of Florida, Massachusetts, and New Hampshire. No patient health data was compromised. The hospital reported the incident to law enforcement and the FBI, engaged forensic experts, and offered credit protection services to affected employees.