Home, Hope and Healing Data Breach Social Security Numbers and Medical Information

Home, Hope and Healing Inc., a family-owned home health care agency based in Smithfield, Maine, disclosed a data breach that affected hundreds of individuals in the United States.

The breach was reported to the U.S. Department of Health and Human Services on Jan. 9, 2026, and to the Vermont Attorney General on Oct. 8, 2026. The company posted a notice on its website on Jan. 8, 2026.

On or about Nov. 10, 2025, Home, Hope and Healing learned of reports of unusual activity on its computer systems. Upon receiving these reports, the company began working with third-party investigators to determine the full nature and scope of the event.

The investigation identified signs of unauthorized access to the company's network between Nov. 9, 2025, and Nov. 12, 2025. During this window, certain files may have been copied and taken from the network.

The types of information that may have been exposed included both personally identifiable information and protected health information. The personally identifiable information included names, addresses, Social Security numbers and government ID numbers.

The protected health information included medical information and health records.

Home, Hope and Healing's response to the breach

Home, Hope and Healing encouraged individuals to remain vigilant against incidents of identity theft and fraud by reviewing their account statements and monitoring their credit reports for any suspicious activity. The company directed people to publicly available resources, including free annual credit reports available from each of the three bureaus.

Individuals who have questions about the breach can reach the company by email at Administration@HHHCares4.Me. Individuals may also write to Home, Hope and Healing Inc. at PO Box 220, 189 Village Road, Smithfield, Maine 04978. The company's office is open Monday through Friday from 8 a.m. to 4:30 p.m.