Kentucky Mountain Health Alliance, Inc.
ent_739bf9a4bae632c6bfe001a5
Disclosures
5
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
30,830
nationwide · HHS OCR KY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Kentucky Mountain Health Alliance, Inc.
- Normalized
- kentucky mountain health alliance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- kymha.com
Disclosure history (5)newest first
- New Hampshire State AGas victim2026-06-19
Kentucky Mountain Health Alliance, Inc. (KMHA) notified the NH Attorney General of a data breach affecting one New Hampshire resident. On or around September 16, 2025, KMHA identified unauthorized access to its network. An investigation determined an unauthorized individual viewed and obtained files containing PHI, SSNs, driver's license numbers, financial account info, and medical information. KMHA took systems offline, engaged a cybersecurity firm, and notified law enforcement. The affected resident was notified on June 12, 2026, and offered one year of complimentary identity monitoring services through Epiq.
- Massachusetts State AGas victim2026-06-19
Kentucky Mountain Health Alliance, Inc. issued a breach notification to Massachusetts residents regarding a security incident involving personal information. The company provided affected individuals with a complimentary two-year identity monitoring membership through Epiq, including credit monitoring, dark web monitoring, and identity theft insurance. The notice outlines steps for placing security freezes and fraud alerts with credit bureaus.
- KENTUCKYHHS OCRas victim2026-06-19
Kentucky Mountain Health Alliance reported to HHS on 2026-06-19 a Hacking/IT Incident affecting 30830 individuals. Breached information located on Network Server.
- Indiana State AGas victim2026-06-12
Kentucky Mountain Health Alliance Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-09-16 and was reported on 2026-06-12. 88 Indiana residents were affected. 30,830 individuals affected in total.
- Nebraska State AGas victim2026-06-12
Kentucky Mountain Health Alliance, Inc. (KMHA) reported to the Nebraska Attorney General that on or around September 16, 2025, unauthorized access occurred to its network. The incident affected two Nebraska residents, exposing personal information including SSNs, driver's licenses, passport numbers, financial account data, and protected health information. KMHA engaged a cybersecurity firm, reported to law enforcement, and provided two affected individuals with one year of complimentary identity monitoring services. Notices were sent on June 12, 2026.