Cottage Hospital Data Breach Exposes Sensitive Information of Over 2,100 Individuals On January 27, 2026, Cottage Hospital disclosed a data breach affecting 2,156 individuals across the U.S., with the majority 1,138 residing in New Hampshire. Additional impacted individuals included 83 in Maine and 62 in Massachusetts. The breach involved unauthorized access to a file server within the hospital’s network between October 14 and October 21, 2025, though the intrusion was not detected until December 8, 2025. Exposed data included names, Social Security numbers, driver’s license numbers, and in some cases, bank account details. Patients’ medical and health insurance information may have also been compromised. The hospital reported the incident to the attorneys general offices of Maine, Massachusetts, New Hampshire, and Vermont. Written notifications were sent to affected individuals on February 6, 2026, with a public notice posted on the hospital’s website. In response, Cottage Hospital engaged third-party cybersecurity experts to investigate and contain the breach. The hospital has since implemented enhanced security measures and continues to assess additional safeguards, including ongoing employee training. Affected individuals were offered a complimentary one-year membership to Experian’s IdentityWorks credit monitoring and identity theft protection service, covering credit monitoring, fraud consultation, and identity restoration. A dedicated call center (833-918-4978) was established to assist those impacted. The hospital’s notification letter, including activation instructions for the service, is available on its website.