Sandhills Medical Foundation
ent_6307051a02ea613777f6c047
Disclosures
14
State AG · HHS OCR · Leak Site · 7 jurisdictions
Incidents
3
filings grouped by incident
Max affected reported
169,017
nationwide · State AG ME
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- Sandhills Medical Foundation
- Normalized
- sandhills medical— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- sandhillsmedical.org
Disclosure history (14)newest first
- 🦞Maine State AGas victim2026-06-03
Sandhills Medical Foundation, Inc. reported an external system breach (hacking) occurring on May 2, 2025, discovered on May 8, 2025. The incident affected 169,017 individuals, including 39 Maine residents. Affected data included names and personal identifiers combined with government IDs. The organization provided 12 months of identity theft protection services.
- ⭐Texas State AGas victim2026-06-02
Sandhills Medical Foundation , Inc. based in McBee, South Carolina, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-08 and reported on 2026-06-02. 328 Texas residents were affected. 169,017 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Notice by publication in print media;Posted at company website or special website;U.S. Mail.
- ⛰️New Hampshire State AGas victim2026-06-02
Sandhills Medical Foundation, Inc. (dba Sandhills Medical), a Federally Qualified Community Health Center, reported a ransomware attack occurring from May 2 to May 8, 2025. The incident affected employee and patient data, including SSNs, driver's licenses, DOBs, and PHI. Sandhills notified the NH Attorney General on April 29, 2026, and mailed notices to 5 NH residents on April 28, 2026. Remediation included network security enhancements, engaging new IT partners, and providing 12 months of free credit monitoring and fraud assistance.
- ⛰️New Hampshire State AGas victim2026-04-29
Sandhills Medical Foundation, Inc. notified the New Hampshire Attorney General of a ransomware attack occurring from May 2 to May 8, 2025. The incident involved unauthorized access to patient and employee servers, resulting in the encryption of data and exfiltration of personal information including SSNs, driver's licenses, and PHI. Sandhils recovered encrypted data, did not pay ransom, and mailed notifications to affected individuals, including 5 New Hampshire residents, on April 28, 2026. Remediation included enhanced network protocols and engagement of new IT partners.
- 🍁Vermont State AGas victim2026-04-29
Sandhills Medical Foundation, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-04-29. The reporting organization type is Health Care. 3 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Health Records.
- 🏎️Indiana State AGas victim2026-04-28
Sandhills Medical Foundation Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-05-02 and was reported on 2026-04-28. 7 Indiana residents were affected. 169,017 individuals affected in total.
- 🌴South Carolina State AGas victim2026-04-28
Sandhills Medical Foundation, Inc. (d/b/a Sandhills Medical) disclosed a ransomware attack discovered on May 8, 2025. An unauthorized third party accessed the server directly, obtaining patient personal information including PHI, SSNs, driver's licenses, and financial data. The organization engaged forensic experts and law enforcement, enhanced network protocols, and offered 12 months of credit monitoring and fraud assistance to affected individuals.
- 🏎️Indiana State AGas victim2026-04-28
Sandhills Medical Foundation Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-05-02 and was reported on 2026-04-28. 7 Indiana residents were affected. 169,017 individuals affected in total.
- 🦞Maine State AGas victim2026-04-28
Sandhills Medical Foundation, Inc. (McBee, SC) experienced an external system breach (hacking) that began on 2025-05-02 and was discovered on 2025-05-08. A total of 169,017 individuals were affected nationally, including 8 Maine residents. Consumer notification was sent on 2026-04-28. Identity theft protection services were offered for 12 months.
- SOUTH CAROLINAHHS OCRas victim2025-09-14
Sandhills Medical Foundation reported to HHS on 2025-09-14 a Hacking/IT Incident affecting 169017 individuals. Breached information located on Network Server.
- GLOBALLeak Siteas victim2025-06-03
Sandhills Medical Foundation, Inc. is a Federally qualified community health center (FQHC) that has been providing comprehensive healthcare services since 1977. With locations in Chesterfield, Kershaw, Lancaster, and Sumter Counties, the organization focuses on primary care medicine, mental health, and supportive services such as healthcare navigation for Medicaid and the Affordable Care Act. The foundation aims to address community healthcare needs by delivering quality and cost-effective services to its patients. It also emphasizes preventive care and coordination of care through a patient-centered medical home approach
- GLOBALLeak Siteas victim2025-05-02
Sandhills Medical Foundation, Inc. is a Federally qualified community health center (FQHC) that has been providing comprehensive healthcare services since 1977. With locations in Chesterfield, Kershaw, Lancaster, and Sumter Counties, the organization focuses on primary care medicine, mental health, and supportive services such as healthcare navigation for Medicaid and the Affordable Care Act. The foundation aims to address community healthcare needs by delivering quality and cost-effective services to its patients. It also emphasizes preventive care and coordination of care through a patient-centered medical home approach
- 🦞Maine State AGas victim2021-03-05
Sandhills Medical Foundation, Inc. experienced an external system breach on September 23, 2020, which was discovered on January 8, 2021. The breach affected 39,602 individuals, compromising names and Social Security numbers. The company began notifying affected individuals on March 5, 2021, and offered one year of free credit monitoring and identity theft protection services.
- 🌴South Carolina State AGas victim2021-03-05
Sandhills Medical Foundation, Inc. notified South Carolina residents of a data breach involving a third-party data storage vendor. Hackers accessed the vendor's system between September 23, 2020, and December 3, 2020, encrypting data and demanding a ransom. The vendor paid the ransom and recovered the data. Affected information included names, dates of birth, addresses, driver's licenses, Social Security numbers, and claims information. Sandhills offered 90 days of identity theft protection via CyberScout.