Shore Medical Center
Disclosed May 23, 20251 year ago31,177 affectedConfirmed
The covered entity (CE), Shore Medical Center, reported that its business associate (BA) was the subject of a cybersecurity incident that affected the protected health information of 31,177 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, diagnoses/conditions, and treatment information. The CE notified HHS, the affected individuals and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 31,177 (as reported to HHS) |
|---|---|
| Disclosed | May 23, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-05-23 Shore Medical Center Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Shore Medical Center (Healthcare Provider, NJ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | May 23, 2025 | |
| HHS archivetotal | May 23, 2025 | 31,177 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 31177 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Shore Medical Center, reported that its business associate (BA) was the subject of a cybersecurity incident that affected the protected health information of 31,177 individuals. The PHI involved included names, Soci · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.