InterMed
Disclosed Dec 18, 20196 years ago33,000 affectedConfirmed
InterMed, PA, the covered entity (CE), reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 33,000 individuals. The PHI involved included names, birthdates, health insurance information, clinical information, and Social Security numbers. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE implemented additional administrative and technical safeguards and retrained its workforce.
What is known
| People affected | 33,000 (as reported to HHS) |
|---|---|
| Disclosed | Dec 18, 2019 |
| Discovered | Sep 30, 2019 |
| Happened | Sep 6, 2019 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Government IDs, Payment cards, Financial, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Maine Attorney General breach notice archive: InterMedmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): InterMed (Healthcare Provider, ME)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Maine AGresidents of ME | Dec 18, 2019 | 145 |
| HHS archivetotal | Jan 8, 2020 | 33,000 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn","government-id","payment-card","financial"] to ["names","ssn","government-id","payment-card","financial","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 147 to 33000 · backfill source
- 2026-09-25 · summary: empty to InterMed, PA, the covered entity (CE), reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 33,000 individuals. The PHI involved included names, birthdate · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.