HackingCustomer Data InvolvedEmployee Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Tombigbee Healthcare Authority
bd_6d02dfbff9534a39 · schema v1 · pii pii-v1
Full breach record for Tombigbee Healthcare Authority →Tombigbee Healthcare Authority dba Whitfield Regional Hospital notified Massachusetts residents of a cybersecurity incident occurring between May 15, 2025, and June 8, 2025. Unauthorized access resulted in the exposure of personal and health information. The hospital secured its network, reported to law enforcement, and engaged external cybersecurity professionals. Affected individuals were offered 12 months of complimentary credit monitoring via Experian IdentityWorks.
Massachusetts clock✗ MA AG >90d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1178-tombigbee-healthcare-authority-dba-whitfield-regional-hospital/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- 90109ce2e92b649482ad54b07da6218d1581f8ee85b6686d86feab026e0d0040
Reporting entity
- Name
- Tombigbee Healthcare Authoritynorm: tombigbee healthcare authority
Victim entity
- Name
- Tombigbee Healthcare Authoritynorm: tombigbee healthcare authority
Incident
- Discovered
- Jun 8, 2025
- Materiality determined
- —
- Notification sent
- Jul 17, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(388 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.