BreachCensus

Sandhills Medical Foundation

healthcareHealthcareUnited States of America

Sandhills Medical Foundation is a healthcare organisation in United States of America. It appears on the HHS OCR breach portal and the Massachusetts Attorney General breach-notification register with 2 confirmed incidents; the most recent notice was filed on September 14, 2025.

Data as of September 26, 2026.

Sources

Confirmed incident

US-SC — Hacking/IT Incident

Disclosed
September 14, 2025
Records affected
169,017

Was I affected? →

Timeline

  1. August 11, 2025
    Litigation filed Court

    RECAP docket 4:25-cv-10394 (scd): Twitty v. Sandhills Medical Foundation Inc

    source
  2. September 14, 2025
    Reported to regulator Regulator

    HHS OCR breach portal listing: Hacking/IT Incident; Network Server

    source

Litigation

Confirmed incident

US-MA

Disclosed
March 5, 2021

Timeline

  1. March 5, 2021
    Reported to regulator Regulator

    MA AG breach notification: 3 Massachusetts residents affected

    source
  2. December 12, 2022
    Litigation filed Court

    RECAP docket 22-2268 (ca4): Joann Ford v. Sandhills Medical Foundation, Inc.

    source

Litigation

What a Massachusetts notice means

Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.

Note: the count is Massachusetts residents only, not a total.

Massachusetts breach-notification register ↗

Related

Same sector and location

Disclosed around the same time