norm: medstar st mary s hospitalno LEI · no CIKMax severity: Critical

Canonical registry

MedStar St. Mary's Hospital

ent_e1795c6fd88c34506d2ecc44

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

172,915

as filed · HHS OCR MD

Leak-site claims

0

none in sample

Identity resolution

Canonical name: MedStar St. Mary's Hospital
Normalized: medstar st mary s hospital— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

MARYLANDHHS OCRas victim2025-05-29
MedStar St. Mary's Hospital (MD) reported to HHS OCR that its business associate experienced a cybersecurity attack affecting PHI of 172,915 individuals. Compromised data included names, addresses, dates of birth, driver's license numbers, Social Security numbers, diagnoses/conditions, lab results, medications, and health insurance information. The breach was reported on 2025-05-29 and involved a network server. Response included HHS, individual, and media notifications, substitute notice, complimentary credit monitoring, and implementation of additional safeguards. The specific business associate is not named in the OCR portal entry.