Uintah Basin Healthcare suffered a data breach due to external system hacking, discovered and reported on May 12, 2023, though the incident occurred between October 25, 2022, and November 7, 2022. The breach exposed sensitive personal data, including Social Security numbers, of 103,974 individuals, among whom 16 were Maine residents. The compromised information poses a high risk of identity theft, prompting the organization to offer identity theft protection services to affected individuals. The breach’s scale and the nature of the exposed data—particularly SSNs, which are critical for financial and personal identity—suggest severe reputational and operational consequences for the healthcare provider. The incident underscores vulnerabilities in their cybersecurity defenses, potentially eroding trust among patients and partners. While no immediate evidence of data misuse was reported, the exposure of such sensitive records heightens the likelihood of fraudulent activity, long-term financial harm to victims, and regulatory scrutiny.

On November 7, 2022, Uintah Basin Healthcare (UBH) experienced a data breach that exposed the personal and protected health information (PHI) of patients treated between March 2012 and November 2022. The compromised data included highly sensitive details such as names, dates of birth, addresses, Social Security numbers, and clinical records. The breach was reported to the Vermont Office of the Attorney General on May 9, 2023, with notifications sent to all affected patients by April 10, 2023. The incident suggests a significant compromise of patient confidentiality, posing risks of identity theft, financial fraud, and unauthorized access to medical histories. Given the nature of the exposed data—particularly Social Security numbers and clinical details—the breach carries severe implications for patient privacy and trust in the healthcare provider. The long duration between the breach occurrence and its discovery further exacerbates the potential for misuse of the stolen information.