2026 Penobscot Valley Hospital — unauthorized file access; patient/employee PHI notices (Jan–Jul)

Verified hospital disclosure — notifications began about July 21, 2026. Penobscot Valley Hospital (Lincoln, Maine) said it was alerted to suspicious activity in its IT environment on January 28, 2026, implemented incident response, hired forensic specialists, and notified law enforcement. On February 12, 2026 investigators determined an unauthorized individual may have accessed certain files and folders; on June 4, 2026 the investigation determined personal information and protected health information may have been in those files. Impacted data varied by person but could include names plus address, date of birth, Social Security number, medical information related to a visit, and/or financial information. The hospital offered complimentary identity monitoring and a toll-free call center (1-833-319-8871). No aggregate victim count appeared in the public media notice or initial trade press. BreachHistory retains recordsAffected 0 pending a Maine AG, HHS OCR, or hospital-attested headcount.