Health Data Breach Tracker/NY

Healthcare Provider · Archived

St. John’s Riverside Hospital

2,238 individuals · submitted November 14, 2025

About this report

St. John’s Riverside Hospital, the covered entity (CE), reported that several employees were the targets of an email phishing scheme that compromised the protected health information (PHI) of 2,238 individuals. The PHI involved clinical and demographic information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE revised its policies and procedures regarding the HIPAA Privacy and Security Rules and trained or retrained its workforce. OCR provided technical assistance to the CE.

Summary as published by the HHS Office for Civil Rights.

Organization
St. John’s Riverside Hospital
State
NY
Entity type
Healthcare Provider
Individuals affected
2,238
Submission date
November 14, 2025
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in NY

More Hacking/IT Incident reports