DisclosureLens
GLOBALUnknownLow

Community Medical Center de Falls City

bd_c8a1f4d393cd971e · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Oct 17, 2026

To disclose

—

Affected

Not disclosed

Confidence

60%
Full breach record for Community Medical Center de Falls City →

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

CMC in Falls City targeted by Cyber Attack. Community Medical Center of Falls City: Community Medical Center (CMC) of Falls City was attacked by the Qilin Group, over the weekend of October 17-18, 2026. The attack allowed access to certain parts of the computer network and caused damage to business files. The system was locked, resulting in major disruptions to hospital services, appointment delays, and difficulties for ambulance services. Although patient information does not appear to have been compromised, CMC is deploying a new computer network to secure the facility.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Oct 17, 2026

Press report

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

—

Compliance clock

Not assessable

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

If an SEC 8-K, state-AG notice or victim statement lands, DisclosureLens merges it into an incident and links it here.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.