SouthCoast Medical Group
Disclosed Aug 17, 20233 years ago450,860 affectedConfirmed
The covered entity (CE), SouthCoast Medical Group, LLC, reported that it experienced a hacking incident that affected the protected health information (PHI) of 450,860 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses/conditions, and financial and treatment information. The CE notified HHS, the affected individuals, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 450,860 (as reported to HHS) |
|---|---|
| Disclosed | Aug 17, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-07-03 SouthCoast Medical Group Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): SouthCoast Medical Group (Healthcare Provider, GA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 17, 2023 | 450,860 |
| Vermont AGresidents of VT | Jul 3, 2024 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 450860 · backfill source
- 2026-09-25 · disclosed: 2024-07-03 to 2023-08-17 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), SouthCoast Medical Group, LLC, reported that it experienced a hacking incident that affected the protected health information (PHI) of 450,860 individuals. The PHI involved included names, dates of birth, addresses, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.