Sandhills Medical Foundation
bd_9668087da456ed4e · schema v1 · pii pii-v1
Full breach record for Sandhills Medical Foundation →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Sandhills Medical Foundation, Inc. is a Federally qualified community health center (FQHC) that has been providing comprehensive healthcare services since 1977. With locations in Chesterfield, Kershaw, Lancaster, and Sumter Counties, the organization focuses on primary care medicine, mental health, and supportive services such as healthcare navigation for Medicaid and the Affordable Care Act. The foundation aims to address community healthcare needs by delivering quality and cost-effective services to its patients. It also emphasizes preventive care and coordination of care through a patient-centered medical home approach
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e8ad9aefe6d9ba87Leak Siteinc_ransomfiled 2025-06-03(33d gap)Verified by operator
Regulatory filings (5) · sorted by filing gap
- bd_242773e2f011d92fHHS OCRfiled 2025-09-14(135d gap)Verified
- bd_14fe8ca7b959b067Indiana State AGfiled 2026-04-28(361d gap)Verified by operator
- bd_96138f16bf8d0e58Indiana State AGfiled 2026-04-28(361d gap)Verified by operator
- bd_af253afef01a2414Maine State AGfiled 2026-04-28(361d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 396d gap
- bd_b626cd7670911b3aTexas State AGfiled 2026-06-02(396d gap)Verified by operator
Source provenance
- Source URL
- https://www.ransomware.live/id/U2FuZGhpbGxzIE1lZGljYWwgRm91bmRhdGlvbkBpbmNyYW5zb20=
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2025
- Raw hash
- 8c993d2052c426804a40b065a4eb98d7988501975dba9adfdde58c370eb5cb3a
Reporting entity
- Name
- incransomnorm: inc_ransom
Victim entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
- Industry
- Healthcare
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· inc_ransom
- Threat actor
- Inc RansomExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.