Health Data Breach Tracker/MD

Healthcare Provider · Archived

MedStar St. Mary's Hospital

172,915 individuals · submitted May 29, 2025

About this report

The covered entity (CE), MedStar St. Mary’s Hospital, reported that its business associate (BA) reported that it was the subject of a cybersecurity attack that affected the protected health information (PHI) of 172,915 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses/conditions, lab results, medications, and health insurance information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE and BA provided complimentary credit monitoring services to the affected individuals and implemented additional safeguards to better protect PHI.

Summary as published by the HHS Office for Civil Rights.

Organization
MedStar St. Mary's Hospital
State
MD
Entity type
Healthcare Provider
Individuals affected
172,915
Submission date
May 29, 2025
Breach type
Hacking/IT Incident
Location of information
Network Server
Business associate present
Yes
OCR status
Archived

More breach reports in MD

More Hacking/IT Incident reports