Cumberland County Hospital
ent_29781fe2af0d406ebcfa116f
Disclosures
5
HHS OCR · State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
36,659
nationwide · HHS OCR KY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Cumberland County Hospital
- Normalized
- cumberland county hospital— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- KENTUCKYHHS OCRas victim2025-06-02
Cumberland County Hospital Association reported to HHS on 2025-06-02 a Hacking/IT Incident affecting 36659 individuals. Breached information located on Other.
- Indiana State AGas victim2025-06-02
Cumberland County Hospital Association reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-21 and was reported on 2025-06-02. 1,755 Indiana residents were affected. 36,000 individuals affected in total.
- New Hampshire State AGas victim2025-06-02
Cumberland County Hospital Association (CCH) notified the NH AG of unauthorized access to its computer system between Feb 21 and Apr 3, 2025, discovered on Apr 3, 2025. The incident exposed PII and PHI of 36,659 individuals, including 4 NH residents. Data included SSNs, health info, and billing details. CCH shut down systems, engaged cybersecurity experts, and notified law enforcement.
- Massachusetts State AGas victim2025-06-02
Cumberland County Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-02. 4 Massachusetts residents were affected.
- Illinois State AGas victim2025-06-01
CUMBERLAND COUNTY HOSPITAL ASSOCIATION filed a data-breach notice with the Illinois Attorney General in June 2025 (case 25-06-224). The register records the breach as discovered on April 3, 2025. Personal information types reported: financial account number, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.