Home, Hope and Healing Data Breach 2026: 500+ Maine Home Health Patients Exposed. Medically Fragile Pediatric Population. What To Do

What happened

Home, Hope and Healing, Inc. is a family-owned Maine-licensed Home Health Agency at 189 Village Road, Smithfield, ME (Somerset County, central Maine). Founded in 2002 by CEO Jill Lufkin Robinson, RN, MBA and President Jane Greenblatt, RN, BSN. The agency operates a sister entity, Aspire Behavioral Health and Counseling.

The agency employs approximately 200+ caregivers across 14 of 16 Maine counties — a statewide footprint despite a small administrative office. Services include:

• Skilled pediatric nursing for medically fragile children
• Adult skilled nursing
• Personal support services (PSS) for elderly and disabled adults
• Behavioral health and counseling (via Aspire sister entity)

The patient population is particularly vulnerable: medically fragile pediatrics, elderly, and disabled adults receiving in-home care.

Home, Hope and Healing filed with HHS OCR on January 9, 2026 — Hacking/IT Incident at Network Server — confirming 500 affected individuals (HHS reporting floor; actual count likely higher). Federman & Sherwood announced a class action investigation on April 7, 2026.

The entity posted a notice on its homepage linking to “Website-Event-Notification.pdf” — the PDF was not accessible at the expected path as of mid-May 2026. The intrusion timeline, discovery date, and individual notification dates have not been publicly disclosed.

No ransomware group has publicly claimed responsibility. No leak-site listing has been observed.

Notable: Maine AG portal absence

Maine maintains a robust public AG breach portal. As of mid-May 2026, Home, Hope and Healing does NOT appear on the Maine AG breach list. For a Maine home-health agency with substantial Maine-resident exposure, this is unusual — either the filing is pending or delayed, posted under a variant name, or the portal has not been updated.

What was stolen

Per Federman & Sherwood’s reading of the notification letter:

• Full name
• Social Security number
• Medical records
• Health insurance details
• Other sensitive personal data

Why a medically fragile home-health breach matters

Home, Hope and Healing serves medically fragile pediatric patients (children with severe disabilities, ventilator dependency, feeding tubes, complex medication regimens) plus elderly and disabled adults. The exposed records likely include:

• Pediatric care plans and medication regimens
• Caregiver schedules and home access information
• Family demographic information (parents, guardians, emergency contacts)
• MaineCare (Medicaid) enrollment information

Pediatric SSN exposure creates long-tail synthetic identity theft risk that may not surface for a decade or more.

What Home, Hope and Healing is offering

The PDF notice was not accessible at the expected URL as of mid-May 2026. Credit monitoring vendor, duration, and call center information are not in publicly indexed sources. Read your specific notification letter for activation details.

Practice contact: (207) 250-0636.

What to do

1. Read your specific notification letter to confirm what data elements were involved.
2. If your child was a patient, freeze their credit at all three bureaus (Equifax, Experian, TransUnion) — minors require manual outreach with proof of guardianship. Pediatric records carry long-tail risk.
3. File IRS Form 14039 if SSN exposed (in your own name and your child’s).
4. If you are a parent or guardian of a medically fragile child, audit home access protocols — caregiver schedules and home addresses may be in scope.
5. Watch your MaineCare (Medicaid) Summary Notice for unfamiliar home-health claims.
6. Stop the ongoing flow of your home-health data. HealthConsent files HIPAA restriction requests across pediatric home-health, hospice, and prescription networks.

Continue reading

• Your eight HIPAA rights, in plain English
• Other 2026 healthcare data breaches