Confirmed breach. Intrusion Aug 21, 2025, discovered Aug 21, 2025 — the first regulatory filing landed 197 days later (flagged late). 5,777 individuals reported across the linked filings.
County of Murray dba Murray County Medical Center (MN) reported to HHS OCR on 2026-03-06 a Hacking/IT Incident affecting 5,073 individuals. Breached information was located on Email. No business associate was identified as present. No further detail is available from the HHS web description.
Affected (this filing):
Most recent
3 State AG filingsMar 6, 2026 – Mar 13, 2026ExpandCollapse
MTTXNH
🦬Montana State AGlinked via same-victim cross-source · 100%
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
County of Murray dba Murray County Medical Center reported a data breach to the Montana Attorney General. The breach was reported on 2026-03-06. The breach occurred from 08/21/2025 to 01/27/2026. 402 Montana residents were affected.
Affected (this filing): 402
⭐Texas State AGlinked via same-victim cross-source · 100%
County of Murray dba Murray County Medical Center based in Slayton, Massachusetts, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-01-27 and reported on 2026-03-09. 293 Texas residents were affected. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Medical Information;Health Insurance Information;Other;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail.
Affected (this filing): 293
TX AG >30d
⛰️New Hampshire State AGlinked via same-victim cross-source · 100%
Murray County Medical Center (MCMC) notified the New Hampshire Attorney General of a data security incident affecting 9 NH residents. Suspicious activity was initially detected on August 21, 2025, and confirmed on January 27, 2026. The incident involved unauthorized access to patient/employee data, potentially including names and Social Security numbers. MCMC engaged forensic investigators, implemented security hardening, and mailed notifications offering 12 months of identity protection via Experian. No evidence of misuse was found.