Saint Mary’s Home of Erie Breach

Saint Mary’s Home of Erie says it is investigating a data-privacy incident. The organization’s notice, published October 24, 2025, states that files on certain servers “may have been accessible” to outsiders between August 26 and August 28, 2025, after the issue was discovered on August 27, 2025. Worldleaks has publicly claimed responsibility. The notice does not specify the intrusion method.

Snapshot

• Company: Saint Mary’s Home of Erie - healthcare/long-term care, Erie, Pennsylvania
• Incident window: Aug 26-28, 2025 (per company)
• Vector: Unknown (not specified)
• Threat actor: Worldleaks
• Data exposed: Not specified by the company; see our parsing below
• Affected: Undisclosed (official count not published)
• Disclosure/notice: Oct 24, 2025 (company notice)
• Status: Investigation and notifications in progress

What happened

According to the organization’s notice, Saint Mary’s identified a potential issue on August 27, 2025 and later determined that files and folders on certain servers may have been accessible over a roughly two-day period (Aug 26-28). The notice doesn’t describe how access was obtained or whether data were exfiltrated.

Who’s behind it

Worldleaks posted a claim of responsibility. As of publication, the company has not attributed the attack nor described technical details tying the incident to the group. Treat the claim as the actor’s assertion unless and until the company or forensics corroborate.

What was breached

The organization hasn’t listed specific data elements.
DataBreach.com parsing:
70,600 unique emails
41,900 unique phones
38,300 unique home addresses
5,400 unique SSNs

Latest related dump observed: 2025-08-27.

Distinct value counts may overlap across individuals.

Timeline

• Aug 26-28, 2025: Files/folders may have been accessible (company)
• Aug 27, 2025: Discovery (company)
• Oct 3-4, 2025: Worldleaks posts claim
• Oct 24, 2025: Company publishes notice

Company response

Saint Mary’s says it secured the environment, engaged external forensics, and is notifying impacted individuals and regulators. The notice includes consumer guidance on credit reports, fraud alerts, and freezes; credit-monitoring specifics were not listed in the notice reviewed.