By HFT Staff

On January 28, 2026, Penobscot Valley Hospital was alerted to suspicious activity in its information technology environment. Penobscot Valley Hospital immediately implemented its incident response procedures, took steps to secure systems and hired third-party forensic specialists to assist with an investigation. Penobscot Valley Hospital also notified law enforcement. 

On February 12, 2026, this investigation determined that an unauthorized individual may have accessed certain files and folders. On June 4, 2026, the investigation determined that personal information and protected health information (PHI) may have been in the files impacted by this incident. These files contained information that varied per individual but could have included names and one or more of the following: address, date of birth, Social Security number, medical information related to visits to Penobscot Valley Hospital and/or financial information. 

To help prevent something like this from happening again, Penobscot Valley Hospital has implemented additional safeguards and technical security measures to further protect and monitor its systems.