York Hospital is reporting that hundreds of employees at its hospital and four campuses in York County have been victimized by cyber criminals.
“Personal identifying information” related to names, addresses, Social Security numbers and wages were stolen, hospital spokeswoman Jody Merrill said Wednesday.
The data breach was discovered Monday. Merrill said local law enforcement officials have turned the investigation over to the FBI.
“York Hospital was victimized by cyber criminals who fraudulently stole personal identifying information of York Hospital employees,” Merrill said in a statement issued Wednesday afternoon. “There is no indication at this time that patient health information, which is stored on a system separate from staff employment information, was targeted in this attack, nor was any medical information of York Hospital staff compromised.”
The breach affects staff, including doctors and nurses, who were employed by the hospital in 2015, Merrill said in a telephone interview Wednesday evening. Employees hired in 2016 were not affected, she said.
York Hospital currently employs 1,400 people at its hospital in York and at its campuses in Wells, Berwick, Kittery and South Berwick.
“The hospital sincerely apologizes to its staff for this incident and deeply regrets the inconvenience that will be caused,” Merrill said in the statement. “Identity theft security and mitigation services will be available to all staff at no cost to them so that credit rankings, bank accounts and IRS status can be protected for the upcoming year.”
There have been no reports of criminal activity or identity fraud since the data breach was discovered Monday, Merrill said.
The FBI’s Boston office is investigating the theft, Merrill said.
FBI spokeswoman Kristen Setera in Boston declined to comment Wednesday night.
Dennis Hoey can be contacted at 791-6365 or at: