The email accounts of four employees of Valley View Hospital were compromised in a phishing scam through malicious links embedded in emails disguised as legitimate correspondence from an employee within the company, by an outside user's access. The attack compromised the personal data of about 21,000 people, including hospital employees and patients. The hospital offered complimentary identity protection and credit monitoring services for all the impacted individuals that lost their Social Security numbers or driver’s license numbers.

Valley View Hospital Association suffered a data breach in January 2022, reported by the Maine Office of the Attorney General on April 28, 2022. The incident involved unauthorized access to four employees' email accounts, compromising the personal and limited medical information of 21,708 individuals. While the breach exposed sensitive data—including names and medical details—no specific cases of identity theft were documented. The attack targeted internal employee accounts, leading to potential exposure of patient information, though the full scope of misuse remains unclear. The hospital took corrective measures, but the breach underscored vulnerabilities in safeguarding both employee and patient data within healthcare systems. The lack of reported financial fraud or broader systemic disruption suggests the impact was contained to data exposure rather than operational or existential threats.