Harbor
ent_8541b79adfb7b2d8764b59cb
Disclosures
5
State AG · HHS OCR · 5 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
216,000
as filed · HHS OCR OH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Harbor
- Normalized
- harbor— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 984500C7FE073838RB48
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- goharbor.io
Disclosure history (5)newest first
- 🦞Maine State AGas victim2025-10-24
Harbor experienced an external system breach (hacking) that was discovered on August 1, 2025. The breach occurred on July 25, 2025, and affected 5 Maine residents. Affected individuals were offered 12 months of credit monitoring and identity theft protection services.
- ⛰️New Hampshire State AGas victim2025-10-24
Harbor, a healthcare provider in Toledo, OH, notified the NH AG of a data event affecting 3 NH residents. Unauthorized access occurred July 25–Aug 1, 2025; detected Aug 1, 2025. Data included PII (SSN, DL), PHI, and financial info. Notices sent Sept 30, 2025. Investigation ongoing.
- 🍁Vermont State AGas victim2025-10-24
Harbor notified consumers of a data breach where an unauthorized actor accessed and exfiltrated files between July 25 and August 1, 2025. The incident involved patients, employees, and board members. Compromised data included names, SSNs, driver's licenses, medical diagnoses, and financial account information. Harbor engaged in investigation, notified affected individuals via mail and website, and offered credit monitoring services.
- 🦬Montana State AGas victim2025-10-24
Harbor reported a data breach to the Montana Attorney General. The breach was reported on 2025-10-24. The breach occurred from 07/25/2025 to 08/01/2025. 6 Montana residents were affected.
- OHHHS OCRas victim2025-09-30
HHS OCR Breach Portal entry: Harbor (Ohio, Healthcare Provider) reported a Hacking/IT Incident affecting a Network Server on 2025-09-30. 216,000 individuals affected. No business associate involvement reported. No further narrative provided in the portal row.