Skip to content
Network USA

HHS OCR report ยท 2019

Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center data breach

Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center, a healthcare provider in Vermont, reported a breach affecting 72,224 individuals to HHS OCR on Feb 20, 2019.

OCR report facts

Covered entity
Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center
Entity type
Healthcare Provider
State
Vermont
Individuals affected
72,224
Submission date
Feb 20, 2019
Type of breach
Hacking/IT Incident
Location of breached information
Email
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), Rutland Regional Medical Center, reported that multiple employees were the victims of an email phishing attack that affected the electronic protected health information (ePHI) of 72,224 individuals. The ePHI involved included names, Social Security numbers, financial and health insurance information, dates of birth, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the bre...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center.