About Harbor
Harbor, a healthcare organization based in Toledo, Ohio, recently experienced a data breach. The incident involved an external system breach through hacking, which was discovered on August 1, 2025. This breach affected multiple individuals, including five Maine residents, and involved sensitive personal information. Harbor has taken steps to notify affected individuals and is working to address the situation.
What Happened
On August 1, 2025, Harbor was alerted to suspicious activity on our computer network. Harbor immediately launched an investigation to determine the nature and scope of the activity. Through the investigation, we determined that an unauthorized actor accessed and took certain files on our network between July 25, 2025 to August 1, 2025. Harbor subsequently conducted a comprehensive review of the impacted account to determine the type of information present and to whom it relates. Harbor is notifying affected individuals by providing notice on our website, to the media, and sending notice letters through the U.S. Postal Service to those for whom it has a mailing address.
The breach occurred between July 25, 2025, and August 1, 2025, involving unauthorized access to Harbor’s network. Affected individuals include patients, employees, and board members of Harbor, and the breach was discovered on August 1, 2025.
Next Steps
Affected users are encouraged to remain vigilant by reviewing their account statements and monitoring their credit reports for any unauthorized or suspicious activity. Harbor has provided guidance on how to better protect against identity theft and fraud, including placing fraud alerts and security freezes on credit files. Affected individuals are also encouraged to contact the Federal Trade Commission, their state Attorney General, and law enforcement to report any attempted or actual identity theft and fraud.
Identity Theft Protection Services
Harbor is offering identity theft protection services to impacted individuals at no cost. The services, provided by Epiq-Privacy Solutions, include 12 months of 1-Bureau credit monitoring with alerts, dark web monitoring, credit protection, change of address monitoring, and identity restoration & lost wallet assistance. Affected individuals are encouraged to enroll in these services to help safeguard their personal information and mitigate the risk of identity theft.