By HFT Staff

Saint Anthony Hospital is providing this notice because an unauthorized party may have gained access to two Saint Anthony employee email accounts. The incident resulted in unauthorized access and/or acquisition of certain files of unstructured data from within the network. Upon learning of the issue, they contained the affected systems and conducted an immediate and thorough investigation into the incident with assistance from third-party cybersecurity experts. 

As part of the investigation, they worked to determine the extent of the activity and what, if any, individual personal information may have been accessed and/or acquired by the unauthorized party. The investigation determined that their electronic health records system was not affected by the incident. However, the investigation determined certain files and folders of unstructured data within the affected systems were accessed and/or acquired by an unauthorized party on or around February 27, 2025.  

They are not aware of any evidence that any information has been misused as a result of this email incident and they are not aware of any instances of identity theft or fraud, but they partnered with third-party specialists to conduct a thorough review of the affected data to identify any and all potentially affected individuals. After that review concluded on or around February 13, 2026, they determined that the data contained patient personal information and personal health information. Thereafter, we posted notice of the incident on our website. On March 6, 2026, Saint Anthony notified the potentially impacted individuals by mail. 

Upon learning of the event, they took immediate action to protect the individual personal information they maintain. They will continually evaluate and modify their practices to enhance the security and privacy of personal information in their possession.