Geisinger Health

Disclosed May 20, 2020805 affectedConfirmed

The covered entity (CE), Geisinger Health, reported that a workforce member impermissibly accessed the electronic protected health information (ePHI) of 717 individuals. The ePHI involved included names, Social Security numbers, addresses, birthdates, medications prescribed, diagnoses, lab results, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the responsible employee and implemented additional administrative and technical safeguards to better protect its ePHI.

What is known

People affected	805 (as reported by the organization)
Disclosed	May 20, 2020
Discovered	Mar 20, 2020
Happened	Aug 1, 2017
Attack	Insider
Data exposed	NamesSocial Security numbersHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticemaine.gov

Maine Attorney General breach notice archive: Geisinger Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Geisinger Health (Healthcare Provider, PA)

Notices filed

Residents of MEMay 20, 2020

Maine AG1 person

TotalSep 23, 2020

HHS archive717 people

History of this record

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

["names","ssn"] to ["names","ssn","health"]by backfillSource

summary2026-09-25

empty to The covered entity (CE), Geisinger Health, reported that a workforce member impermissibly accessed the electronic protected health information (ePHI) of 717 individuals. The ePHI involved included names, Social Security numbers, addresses, by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.

Everything about Geisinger Health