Harbor healthcare provider reports hacking incident affecting 216,000 patients
A healthcare provider named Harbor has filed a report with HHS OCR regarding a hacking/IT incident. The breach involved unauthorized access to a network server, potentially exposing the protected health information of 216,000 individuals. The filing was submitted on September 30, 2025. As a covered entity, Harbor is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for notifications if their patients may be members of this organization, and review their own vendor contracts to ensure business associates have robust security measures for network servers.
Primary source: HHS OCR Breach Portal — Harbor (OH) · reported 09/30/2025 · 216,000 individuals · Checked against the record 2026-10-08