Penobscot Valley Hospital, a healthcare provider in Lincoln, Maine, detected suspicious activity on its network on January 28, 2026. The hospital secured its network, involved law enforcement, and determined that personal and protected health information may have been accessed.
The breached data types include names, addresses, dates of birth, Social Security numbers, medical information, financial information, financial account codes, and credit/debit card information. The exact number of affected individuals has not been publicly disclosed. The hospital began notifying affected patients and employees around July 23, 2026, and is offering complimentary identity monitoring.
Further details regarding the incident, including a confirmed total of affected individuals, may emerge as the investigation progresses. Notifications to affected individuals were sent, and the incident was reported to the Vermont Attorney General in July 2026.