Northwestern Medical Center

Disclosed Aug 9, 2022686 affectedConfirmed

The covered entity (CE), Northwest Medical Center, reported that an employee impermissibly accessed medical records containing the protected health information (PHI) of 686 individuals. The PHI involved included names, addresses, drivers’ license and Social Security numbers, dates of birth, and diagnoses. The CE notified HHS, affected individuals, and the media. A call center was created for questions or concerns. Following the breach, the CE sanctioned the employee responsible and strengthened its administrative and security safeguards to better protect its PHI. All staff were retrained.

What is known

People affected	686 (as reported to HHS)
Disclosed	Aug 9, 2022
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeago.vermont.gov

Vermont Attorney General: 2022-08-15 Northwestern Medical Center Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Northwestern Medical Center (Healthcare Provider, VT)

Notices filed

TotalAug 9, 2022

HHS archive686 people

Residents of VTAug 15, 2022

Vermont AGCount not stated

History of this record

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 686by backfillSource

disclosed2026-09-25

2022-08-15 to 2022-08-09by backfillSource

summary2026-09-25

empty to The covered entity (CE), Northwest Medical Center, reported that an employee impermissibly accessed medical records containing the protected health information (PHI) of 686 individuals. The PHI involved included names, addresses, drivers’ lby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Northwestern Medical Center