Berkshire Farm Center & Services for Youth

Disclosed Sep 16, 202223,058 affectedConfirmed

The covered entity (CE), Berkshire Farm Center & Services for Youth, reported that an employee was the subject of an email phishing scheme which affected the protected health information (PHI) of 951 individuals. The PHI involved included names, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected	23,058 (as reported to HHS)
Disclosed	Sep 16, 2022
Happened	Jul 14, 2022
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeago.vermont.gov

Vermont Attorney General: 2023-02-28 Berkshire Farm Center & Services for Youth Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2023 data breach report: Berkshire Farm Center & Services for Youth

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Berkshire Farm Center & Services for Youth (Healthcare Provider, NY)

Notices filed

TotalSep 16, 2022

HHS archive23,058 people

TotalOct 6, 2022

HHS archive951 people

Residents of VTFeb 28, 2023

Vermont AGCount not stated

Residents of INFeb 28, 2023

Indiana AG1 person

Other breaches at Berkshire Farm Center & Services for Youth

Hacking breachHacking exposed names and health records. Reported to the HHS archive.4,950 affectedHealthcareUSJul 30, 2020

History of this record

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

6451 to 23058by backfillSource

disclosed2026-09-25

2022-10-06 to 2022-09-16by backfillSource

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

disclosed2026-09-25

2023-02-28 to 2022-10-06by backfillSource

summary2026-09-25

empty to The covered entity (CE), Berkshire Farm Center & Services for Youth, reported that an employee was the subject of an email phishing scheme which affected the protected health information (PHI) of 951 individuals. The PHI involved included nby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 6451by backfillSource

occurred2026-09-25

empty to 2022-07-14by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Berkshire Farm Center & Services for Youth