Bangor Health Center, a psychiatric practice located in Bangor, Maine, has notified 4,229 patients that a hacker from Moldova has accessed their psychiatric records, including names, addresses, Social Security numbers, telephone numbers, diagnoses and doctors’ notes.

The health center provides outpatient therapy to both children and adults for behavioral health conditions including substance use disorders, mood disorders and anxiety, and depression. According to reports, the hacker was able to get through the password security that allows employees to access patient files remotely. The health center found out about the issue when it was contacted by someone saying they sold the data through an online advertisement.

The health center has disconnected the remote access system and is offering one year of credit monitoring to affected patients.