HackingHealthcareHealthcareCustomer Data InvolvedLowResolved
Sandhills Medical Foundation
bd_af253afef01a2414 · schema v1 · pii pii-v1
Full breach record for Sandhills Medical Foundation →Sandhills Medical Foundation, Inc. (McBee, SC) experienced an external system breach (hacking) that began on 2025-05-02 and was discovered on 2025-05-08. A total of 169,017 individuals were affected nationally, including 8 Maine residents. Consumer notification was sent on 2026-04-28. Identity theft protection services were offered for 12 months.
Maine clockDiscovered May 8, 2025 → Filed with AG Apr 28, 2026355d ✗ ME AG >90d51 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 361 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_e8ad9aefe6d9ba87Leak Siteinc_ransomfiled 2025-06-03(329d gap)Verified by operator
- bd_9668087da456ed4eLeak Siteinc_ransomfiled 2025-05-02(361d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_14fe8ca7b959b067Indiana State AGfiled 2026-04-28Verified by operator
- bd_96138f16bf8d0e58Indiana State AGfiled 2026-04-28Verified by operator
- bd_b626cd7670911b3aTexas State AGfiled 2026-06-02(35d gap)Verified by operator
- bd_242773e2f011d92fHHS OCRfiled 2025-09-14(226d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e36cacd3-3e26-4bed-be5b-45965f2326cb.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2026
- Raw hash
- 382a5f2fbfedc1ecd6d7e0f2059ce1e02b40f312413ad683c3fba30c9f960b74
Reporting entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
- Industry
- Healthcare
Victim entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- May 8, 2025
- Materiality determined
- —
- Notification sent
- Apr 28, 2026
- Affected individuals
- 8
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 51 weeks(355 days from discovery to filing)
- Compliance flags
- ME AG >90d · 355dME resident >180d · 355dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 8, 2025→ Filed with AG: Apr 28, 2026355d 90 days ME AG >90d Maine Discovered: May 8, 2025→ Notified: Apr 28, 2026355d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.