HackingIdentity (basic)Government IDMediumContained

LIFEPOINT HEALTH, INC.

bd_5beec324b2c902be · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 23, 2026

Filed

Apr 23, 2026

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for LIFEPOINT HEALTH, INC. →

Lifepoint Health, Inc. notified Nebraska residents of a data breach discovered on February 23, 2026. An unauthorized third party gained access to internal databases via a compromised user account on February 22, 2026. The incident exposed names, addresses, phone numbers, dates of birth, and Social Security Numbers of contracted vendor employees. Lifepoint contained the incident within 24 hours, reset credentials, and offered one year of credit monitoring through Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

Feb 22, 2026

Begins

Feb 23, 2026

Discovered

Apr 23, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: LIFEPOINT HEALTH, INC.
norm: lifepoint health

Name: LIFEPOINT HEALTH, INC.
norm: lifepoint health

Discovered: Feb 23, 2026
Breach occurred: Feb 22, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Disabling and resetting impacted credentials
Enhance our security measures and controls to strengthen the security of our network, internal systems, and applications
Offering you complimentary identity theft protection and credit monitoring services through Equifax ID Watchdog for one (1) year
Changes made: Enhance our security measures and controls to strengthen the security of our network, internal systems, and applications
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/e5c32fe7-20c2-4572-8261-38e6c116a11e.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 304b28852b41ef8fdb9ec74d48f41a848dc1b0586d32db6f8264193f1a94f0a0

Reporting entityLIFEPOINT HEALTH, INC.

Victim entityLIFEPOINT HEALTH, INC.

Incidentdiscovered Feb 23, 2026

Stated responseDisabling and resetting impacted credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov