York Hospital

Disclosed Dec 23, 20251,259 affectedConfirmed

The covered entity (CE), York Hospital, reported that an employee mailed the protected health information (PHI) of 1,259 individuals to the wrong recipients. The PHI involved included demographic information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected	1,259 (as reported to HHS)
Disclosed	Dec 23, 2025
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): York Hospital (Healthcare Provider, ME)

Notices filed

TotalDec 23, 2025

HHS archive1,259 people

Other breaches at York Hospital

Breach, details not statedExposed names, Social Security numbers, addresses and names. Reported to the Maine AG.HealthcareUSMar 4, 2016 Breach, details not statedExposed names and health records. Reported to the Maine AG.HealthcareUSFeb 20, 2015

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about York Hospital