InterMed

Disclosed Dec 18, 201933,000 affectedConfirmed

InterMed, PA, the covered entity (CE), reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 33,000 individuals. The PHI involved included names, birthdates, health insurance information, clinical information, and Social Security numbers. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE implemented additional administrative and technical safeguards and retrained its workforce.

What is known

People affected	33,000 (as reported to HHS)
Disclosed	Dec 18, 2019
Discovered	Sep 30, 2019
Happened	Sep 6, 2019
Attack	Hacking
Data exposed	NamesSocial Security numbersGovernment IDsPayment cardsFinancialHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticemaine.gov

Maine Attorney General breach notice archive: InterMed

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): InterMed (Healthcare Provider, ME)

Notices filed

Residents of MEDec 18, 2019

Maine AG145 people

TotalJan 8, 2020

HHS archive33,000 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

["names","ssn","government-id","payment-card","financial"] to ["names","ssn","government-id","payment-card","financial","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

147 to 33000by backfillSource

summary2026-09-25

empty to InterMed, PA, the covered entity (CE), reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 33,000 individuals. The PHI involved included names, birthdateby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.

Everything about InterMed