Skip to content

Singing River Health System

Disclosed Oct 18, 20232 years ago895,204 affectedConfirmed

Official notice

The covered entity (CE), Singing River Health System and Singing River Gulfport, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 895,204 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims information, diagnoses, conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute breach notice on its website. In response to the breach, the CE reset all passwords and implemented a series of improved technical safeguards.

What is known

People affected895,204 (as reported to HHS)
DisclosedOct 18, 2023
HappenedAug 19, 2023
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalOct 18, 2023895,204
Indiana AGresidents of INJan 11, 2024360
California AGresidents of CAJan 12, 2024
Vermont AGresidents of VTJan 12, 2024
California AGresidents of CAMay 13, 2024
Vermont AGresidents of VTMay 13, 2024

Other breaches at Singing River Health System

BreachAffected
Disclosed May 19, 2026May 194 months agoHacking54K
Disclosed Jun 17, 2021Jun 17, 20215 years agoHacking3,543
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: organization to hhs · backfill source
  • 2026-09-25 · records: 252890 to 895204 · backfill source
  • 2026-09-25 · disclosed: 2024-01-11 to 2023-10-18 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Singing River Health System and Singing River Gulfport, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 895,204 individuals. The PHI involved included names, · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 252890 · backfill source
  • 2026-09-25 · disclosed: 2024-01-12 to 2024-01-11 · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-01-12-singing-river-health-system-data-breach-notice-consumers · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-05-13-singing-river-health-system-and-its-wholly-owned-subsidiary-singing-river-gulfport-data · backfill source
  • 2026-09-25 · disclosed: 2024-05-13 to 2024-01-12 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Singing River Health System

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.