Sandhills Medical Foundation
bd_b626cd7670911b3a · schema v1 · pii pii-v1
Full breach record for Sandhills Medical Foundation →Sandhills Medical Foundation , Inc. based in McBee, South Carolina, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-08 and reported on 2026-06-02. 328 Texas residents were affected. 169,017 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Notice by publication in print media;Posted at company website or special website;U.S. Mail.
Linked disclosures
Why this link?Ransomware claims (2)
- bd_e8ad9aefe6d9ba87Leak Siteinc_ransomfiled 2025-06-03(364d gap)Verified by operator
- bd_9668087da456ed4eLeak Siteinc_ransomfiled 2025-05-02(396d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_14fe8ca7b959b067Indiana State AGfiled 2026-04-28(35d gap)Verified by operator
- bd_96138f16bf8d0e58Indiana State AGfiled 2026-04-28(35d gap)Verified by operator
- bd_af253afef01a2414Maine State AGfiled 2026-04-28(35d gap)Verified
- bd_242773e2f011d92fHHS OCRfiled 2025-09-14(261d gap)Verified
Source provenance
- Source URL
- https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005087
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 2, 2026
- Raw hash
- d50f52e7c39e59806adaba9feff5c7029f6a930060fab6d079fb6ee0c1728ee3
Reporting entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
Victim entity
- Name
- Sandhills Medical Foundationnorm: sandhills medical
- Domain
- sandhillsmedical.org
- Industry
- Otherllm
Incident
- Discovered
- May 8, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 328
- Data types
- IDENTITY_GOVERNMENTPHIPII
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 13 months(390 days from discovery to filing)
- Compliance flags
- TX AG >30dLeak >180d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.