Saint Mary’s Home of Erie Data Breach Exposes SSNs

The continuing care retirement community, Saint Mary’s Home of Erie, recently experienced a data breach that exposed sensitive information of certain individuals.

The incident occurred between Aug. 26, 2025, and Aug. 28, 2025, prior to the sale of the facility to LECOM Health. On Aug. 27, 2025, the organization discovered suspicious activity within its network environment and launched an investigation with third-party cybersecurity specialists to determine the nature and scope of the incident.

The investigation revealed that files and folders stored on certain databases may have been accessible to unauthorized parties during this two-day window. The types of information potentially exposed include names, Social Security numbers, driver’s license numbers and financial account information.

The organization reported the breach to the U.S. Department of Health and Human Services, the Massachusetts Office of Consumer Affairs and Business Regulation, and to the attorneys general offices of Maine and Vermont.

The company also posted an official notice on their website. Written notice was provided to affected consumers, including six Massachusetts residents.

The company has not publicly disclosed the total number of individuals affected nationwide.

Saint Mary’s Home of Erie's response

To support those affected, the company is offering twelve months of complimentary credit monitoring and identity theft protection services through Cyberscout, a TransUnion company. Impacted individuals received written notice with instructions on how to enroll in these services at no cost.

The organization is also providing guidance on how to place a fraud alert or credit freeze with the major credit bureaus and encourages individuals to monitor their credit reports and account statements for suspicious activity.

Given the nature of the breach, affected individuals are strongly encouraged to take advantage of the credit monitoring services, remain vigilant for signs of identity theft and consider placing a fraud alert or credit freeze on their credit files.