UnknownHealthcareHealthcareCustomer Data InvolvedFinancial accountHealth (basic)Identity (basic)Government IDPCIPIIMediumContained

Central Ozarks Medical Center

bd_dd486ef81fa7ac2f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 27, 2026

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Central Ozarks Medical Center →

Central Ozarks Medical Center notified Massachusetts residents of potential unauthorized access to personal information. The incident letter, dated January 9, 2026, states that no evidence of misuse was found. The organization offered 24 months of identity theft protection via IDX and implemented additional security enhancements. Specific dates of the breach, discovery, or affected counts were not disclosed in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jan 27, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_8f4c56dc0e884c922026-01-09 · +18dVerified
HHS OCRbd_e8366f2f443ebcd62026-01-09 · +18dVerified
Indiana State AGbd_ff6ee2e3fab37c7f2026-01-09 · +18dVerified by operator

Name: Central Ozarks Medical Center
norm: central ozarks medical center

Name: Central Ozarks Medical Center
norm: central ozarks medical center
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Jan 9, 2026
Affected individuals: 1state-resident count only
Data types: Financial accountHealth (basic)Identity (basic)Government IDPCIPII
Attack vector: Unknown

During the incident: Implemented additional enhancements and continue to regularly assess and strengthen our security measures
Offering identity theft protection services through IDX including 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services
Changes made: Implemented additional enhancements and continue to regularly assess and strengthen our security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJan 9 · first

HHS OCRJan 9 · first

Indiana State AGJan 9 · first

Massachusetts State AG+18d · this page

Pattern: first filing Jan 9 (MT), last Jan 27 (MA) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-122-central-ozarks-medical-center/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2026
Raw hash: 7ad84b8722d218851384a7aed5ba879ed0d31f21e27475743f66ed1241b439ee

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCentral Ozarks Medical Center

Victim entityCentral Ozarks Medical Center

IncidentUnknown

Stated responseImplemented additional enhancements and continue to regularly assess and strengthen our security measures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov