Sandhills Medical Foundation

Disclosed Sep 14, 20251 year ago169,017 affectedConfirmed

What is known

People affected	169,017 (as reported to HHS)
Disclosed	Sep 14, 2025
Discovered	May 8, 2025
Happened	May 2, 2025
Attack	Hacking
Data exposed	Names, Health, Social Security numbers, Government IDs, Insurance, Dates of birth
Sector	Healthcare · US
Status	Confirmed

Source	Kind
HHS OCR breach report: Sandhills Medical Foundation (Healthcare Provider, SC)ocrportal.hhs.gov · Official notice	Official notice
Texas Attorney General data security breach report BR-0005087: Sandhills Medical Foundationoag.my.site.com · Official notice	Official notice
Vermont Attorney General breach report: Sandhills Medical Foundationago.vermont.gov · Official notice	Official notice
Indiana Attorney General 2026 data breach report: Sandhills Medical Foundationin.gov · Official notice	Official notice

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Mar 12, 2021Mar 12, 20215 years agoHacking	Mar 12, 20215 years ago	Hacking	Healthcare	Confirmed	40K

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","government-id","insurance","dob"] · backfill source
2026-09-25 · discovered: empty to 2025-05-08 · backfill source
2026-09-25 · occurred: empty to 2025-05-02 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.