On November 3, 2023, the Maine Office of the Attorney General disclosed a data breach targeting Mulkay Cardiology Consultants at Holy Name Medical Center, P.C., occurring between September 1 and September 5, 2023. The incident was classified as an external system breach (hacking), compromising the personal information of 79,582 individuals, including driver’s license numbers and other sensitive data. The breach exposed affected individuals to potential identity theft risks, prompting the company to offer free identity theft protection services through Experian as a remedial measure. While the exact method of infiltration remains undisclosed, the scale and nature of the stolen data—particularly government-issued identifiers—heighten concerns over fraudulent activity, financial exploitation, and long-term reputational harm for both the medical center and its patients. As a healthcare-related breach, the incident underscores vulnerabilities in safeguarding patient confidentiality, with implications for trust erosion and potential regulatory scrutiny under data protection laws like HIPAA. The breach did not involve ransomware but represented a deliberate cyber intrusion with substantial personal data exposure.