Bucktail Medical Center fell victim to a business email compromise (BEC) on October 15, 2020, resulting in unauthorized access to personally identifiable information (PII). The breach impacted 1,568 individuals, including 4 residents of Maine. While the exact type of compromised data was not fully detailed, the exposure of PII suggests potential risks such as identity theft or fraud. In response, the organization offered 12 months of identity theft protection services via Kroll to affected individuals. The incident highlights vulnerabilities in email security protocols, which cybercriminals exploited to gain access to sensitive information. No ransomware was involved, and the attack primarily targeted customer/patient data, raising concerns about privacy and regulatory compliance. The breach did not indicate broader operational disruptions or threats to the organization’s existence, but it underscores the critical need for robust cybersecurity measures in healthcare institutions to prevent similar future incidents.