







On Aug. 27, 2025, Saint Mary’s Home of Erie (SMHE), a nonprofit senior care provider in Erie, Pennsylvania, discovered unauthorized activity within its network environment. The incident was determined to have occurred between Aug. 26 and Aug. 28, 2025, when files and folders stored on certain servers may have been accessible to individuals outside the organization.
The specific types of information exposed have not been fully detailed in the public notice, as the review of impacted files is ongoing. However, given the nature of Saint Mary’s Home of Erie’s operations as a health care provider, it is possible that both personally identifiable information (PII) and protected health information (PHI) may have been involved. This could include names, Social Security numbers, dates of birth, addresses, medical records, and related health or billing information.
The breach was reported to the U.S. Department of Health and Human Services on Oct. 24, 2025. Additional details about the breach can be found in the company’s official notice. At this time, there is no public information about who was responsible for the unauthorized access or whether the breach was the result of a targeted cyberattack or an accidental exposure.
After discovering the data privacy event, Saint Mary’s Home of Erie immediately secured its network environment to prevent further unauthorized access. The organization launched an in-depth investigation to determine the scope and nature of the incident, and began a comprehensive review of the affected files and folders. This review is still underway.
If you receive notification from Saint Mary’s Home of Erie or your provider about this breach, you may want to:

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)