Navicent Health
Disclosed Mar 22, 20197 years ago404,993 affectedConfirmed
The covered entity (CE), Navicent Health, Inc., reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 634 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, claims and financial information, diagnoses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and strengthened its administrative, technical, and security safeguards to better protect its ePHI.
What is known
| People affected | 404,993 (as reported to HHS) |
|---|---|
| Disclosed | Mar 22, 2019 |
| Discovered | Jan 24, 2019 |
| Happened | Mar 22, 2018 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Payment cards, Financial, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Maine Attorney General breach notice archive: Navicent Healthmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Navicent Health (Healthcare Provider, GA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Maine AGresidents of ME | Mar 22, 2019 | 12 |
| HHS archivetotal | Mar 22, 2019 | 404,993 |
| Maine AGresidents of ME | Jun 17, 2019 | 13 |
| HHS archivetotal | Aug 23, 2019 | 634 |
History of this record
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 278016 to 404993 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn","payment-card","financial"] to ["names","ssn","payment-card","financial","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Navicent Health, Inc., reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 634 individuals. The ePHI involved included names, addr · backfill source
- 2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","payment-card","financial"] · backfill source
- 2026-09-25 · records: 123353 to 278016 · backfill source
- 2026-09-25 · disclosed: 2019-06-17 to 2019-03-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.