Elliot Health System

Elliot Health System notified New Hampshire regulators and patients of an insider threat incident where an employee accessed patient records without legitimate business reason. The unauthorized access occurred on August 8, 2025, and was discovered on August 15, 2025. Affected data included demographic information, Social Security numbers, and clinical appointment details. The organization implemented employee education and enhanced monitoring.

Elliot Health System notified the NH Attorney General of an insider privacy incident where an employee accessed the medical record of a former household member without legitimate business purpose. One NH resident's PHI and SSN were accessed. Notice was sent to the individual on Nov 12, 2018.

Elliot Health System (NH) reported to HHS OCR on 2014-05-21 a Theft incident affecting 1,208 individuals. The breached information was located on a Desktop Computer. No business associate was identified as present. No further detail was provided in the HHS web description.

Elliot Health System notified the NH Attorney General on May 20, 2014, that personal information of 2 NH residents was accessed following the theft of 4 computer workstations. The breach was discovered on March 27, 2014. Data included names, addresses, DOBs, health info, SSN, and insurance numbers.

Elliot Health System reported a security breach to the NH Attorney General after a business associate, Advanced Medical Partners, Inc., reported the theft of ten computers on February 22, 2008. The computers contained PHI of up to 6 patients, including names, dates of service, insurance info, and DOB. EHS notified patients on March 13, 2008.